Current wireshark version support capturing on multiple adapters at the same time, can we do this from the command line as well? At the moment i'm stuck with: i would very much like something like this: is this possible? Thanks! asked 27 Apr '12, 02:06  Marc |
One Answer:
By "current version" I assume you mean trunk or 1.7.x, right? The tshark man page for those versions says that you can use the "-i" option multiple times to specify capturing on multiple interfaces. (1.6 only supports capturing on multiple interfaces on Linux where the pseudo-device "any" can be used.) answered 27 Apr '12, 07:59  JeffMorriss ♦ |
Ah, very good Jeff, thanks!! i did not know you could also repeat the -i option, (and yes i meant 1.7.2)
As this is a Q&A site, please don't forget to Accept the answer if it answered your question--see the FAQ.
Anyway, you're welcome!