Wireshark-users: Re: [Wireshark-users] Multiple instances of Wireshark/ dumpcap capturing from sa

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Gisle Vanem <gvanem@xxxxxxxx>
Date: Thu, 23 Apr 2015 12:01:31 +0200
Julio Cesar Esteves Cabezas wrote:


	Is it reliable to run multiple instances of Wireshark and/or dumpcap
capturing ON THE SAME NICs in a computer ?
	No risk of a locking or of missing  / duplicate packets ?

	I usually run Wireshark on Windows 7 or 8 or Windows Server 2003 and
above.


This works fine here on Win 8.1:
  start /win /c dumpcap -c100 -i9 &^
  start /c /win dumpcap -c100 -i9 &^
  start /c /win dumpcap -c100 -i9

(1 line in cmd or in a .bat-file).

This gives me 3 console-windows with packets counting in unison. And
the resulting %TEMP\wireshark_pcapng_Ethernet_* files have the same
size and content.

--
--gv