I am performing capture on all devices, and end with messed output. It would be helpfull to have additional column with interface name.

Is there a way to add such column to packet list view?

asked 04 Feb '11, 23:56

Witek's gravatar image

Witek
6113
accept rate: 0%


The Linux 'all' interface doesn't provide that information in its cooked capture, therefore it can't be presented.

A simultaneous capture into pcap-ng would allow for this, but that hasn't been developed, yet.

link

answered 05 Feb '11, 01:07

Jaap's gravatar image

Jaap ♦
6.0k568
accept rate: 11%

Not even minor number of interfaces? Shame.

link

answered 05 Feb '11, 01:47

Witek's gravatar image

Witek
6113
accept rate: 0%

If you have multiple interfaces and want to keep traffic separated, just launch multiple instances of dumpcap and capture from each interface to a separate file. You can merge later if you need to using mergecap.

link

answered 05 Feb '11, 16:26

martyvis's gravatar image

martyvis
6111418
accept rate: 7%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×225
×27
×6
×5

Asked: 04 Feb '11, 23:56

Seen: 2,484 times

Last updated: 05 Feb '11, 16:26

powered by OSQA