|
I apologize if this question is too basic and obvious. I want to do a packet capture on servers (OS type - Windows 2003, 2003R2, 2008, and 2008R2) with multiple NICs teamed together. The NICs might be teamed in a load balanced manner. Would the only way to do an accurate capture require port spanning (or port mirroring) to capture all the packets to and from the server or can running wireshark on the server itself be able to get a complete capture from more than one interface? I have read that tcpdump allows for packet capture from all interfaces in non-promiscuous mode for Linux OS, but I don't know what options are available for Windows machines or non-Linux machines in general. Thanks in advance. |
|
Try the latest Windows version of Wireshark V1.8, it is exactly what you want. It can capture on multiple interfaces in promiscuous mode. |
