Wireshark-users: Re: [Wireshark-users] How to simultaneous capture packets from two different NIC

From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Thu, 14 Apr 2011 09:48:48 -0600
On Thu, Apr 14, 2011 at 12:49:52PM +0000, Lior Zarfati wrote:

> If you don't mind having a seperate log for each NIC, just run 
> WireShark twice. Once for each NIC.

... or use dumpcap, which does nothing but capture and save to a file.  
Then open each file separately to analyze it with Wireshark (or combine 
them with mergecap)