Wireshark-dev: Re: [Wireshark-dev] Problems with capturing on multiple interfaces

From: Michael Tüxen <Michael.Tuexen@xxxxxxxxxxxxxxxxx>
Date: Sat, 21 May 2011 19:16:41 +0200
On May 20, 2011, at 7:05 PM, Guy Harris wrote:
> 
> On May 20, 2011, at 9:49 AM, Jim Young wrote:
> 
>> When I used the command:
>> 
>> ./dumpcap -I -i en1 -i fw0 -t -n -w iftest.pcapng
>> 
>> I got the message:
>> 
>> "The capture session could not be initiated (That device doesn't support
>> monitor mode)."
> 
> Presumably the "-s" option is per-interface, as the appropriate snapshot length might differ based on the link-layer and metadata headers provided.
> 
> If so, presumably the "-I" option should be per-interface as well, as it only applies to 802.11 devices.
Yes, you are right. Using -I on a non 802.11 device will give an error...

Best regards
Michael
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
>