Wireshark-users: Re: [Wireshark-users] Sniffing Multiple Interfaces

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Mon, 25 Oct 2010 16:36:54 -0400
Will wrote:
I would like to request a feature enhancement on Wireshark: in the Interfaces dialog, could you allow selection of multiple interfaces, so that we can scan more than one at the same time, inside a single viewing window?

Particularly on a firewall or router, there is often a situation like a spoof where you are not sure exactly which interface is involved, and you need to scan more than one at the same time. I know you can start multiple instances of Wireshark, but this becomes very very inconvenient when needing to observe more than about three interfaces at the same time.

It's a common request and is #2 in the Capturing section of the WishList:

http://wiki.wireshark.org/WishList#Capturing

It's already supported on Linux which has the "any" pseudo-capturing-device.