 | 1 | initial version |
Based on @Chuckc's comment to my question, I think that, strictly speaking, there's not an answer to getting "tshark display output [always in strictly] chronological order" with multiple interfaces being captured. But the suggestion of using reordercap seems like the best answer.
| | 2 | No.2 Revision |
Based on @Chuckc's comment to my question, I think that, strictly speaking, there's not an answer to getting "tshark display output [always in strictly] chronological order" with multiple interfaces being captured. But the suggestion of using reordercap seems like the best answer.
P.S. I don't have enough karma as yet to accept my own answer.
| | 3 | No.3 Revision |
Based on @Chuckc's comment to my question, I think that, strictly speaking, there's not an answer to getting "tshark display output [always in strictly] chronological order" with multiple interfaces being captured. But the suggestion of using reordercap seems like the best answer.
P.S. I don't have enough karma as yet to accept my own answer.answer, so if this answer is accepted it was by some other kind soul.
