I am performing capture on all devices, and end with messed output. It would be helpfull to have additional column with interface name.
Is there a way to add such column to packet list view?
asked 04 Feb '11, 23:56
Witek 6●1●1●3 accept rate: 0%
The Linux 'all' interface doesn't provide that information in its cooked capture, therefore it can't be presented.
A simultaneous capture into pcap-ng would allow for this, but that hasn't been developed, yet.
answered 05 Feb '11, 01:07
Jaap ♦ 6.0k●5●68 accept rate: 11%
Not even minor number of interfaces? Shame.
answered 05 Feb '11, 01:47
If you have multiple interfaces and want to keep traffic separated, just launch multiple instances of dumpcap and capture from each interface to a separate file. You can merge later if you need to using mergecap.
answered 05 Feb '11, 16:26
martyvis 611●1●4●18 accept rate: 7%
Once you sign in you will be able to subscribe for any updates here
Answers
Answers and Comments
Markdown Basics
learn more about Markdown
Riverbed Technology's Cascade products let you seamlessly move between packets and flows for comprehensive monitoring, analysis and troubleshooting.
Tags:
capture ×225 interfaces ×27 devices ×6 device ×5
Asked: 04 Feb '11, 23:56
Seen: 2,484 times
Last updated: 05 Feb '11, 16:26
What are you waiting for? It's free! Wireshark documentation and downloads can be found at the Wireshark website.
Wireshark 1.7 display filtering on Multiple capture interfaces
Capture cisco trunk interfaces
Windows Vista : There are no interfaces on which a capture can be done
Can't find an interface in order to capture...
Cannot capture packets from remote system.
Capture the first 64bytes of a packet?
Start time for a packet capture
Capturing on Wi-Fi NIC with monitor mode off
SIP capture filter
Missing Packets?
powered by OSQA
First time here? Check out the FAQ!