This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am performing capture on all devices, and end with messed output. It would be helpfull to have additional column with interface name.

Is there a way to add such column to packet list view?

asked 04 Feb '11, 23:56

Witek's gravatar image

Witek
6113
accept rate: 0%


The Linux 'all' interface doesn't provide that information in its cooked capture, therefore it can't be presented.

A simultaneous capture into pcap-ng would allow for this, but that hasn't been developed, yet.

permanent link

answered 05 Feb '11, 01:07

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Not even minor number of interfaces? Shame.

permanent link

answered 05 Feb '11, 01:47

Witek's gravatar image

Witek
6113
accept rate: 0%

If you have multiple interfaces and want to keep traffic separated, just launch multiple instances of dumpcap and capture from each interface to a separate file. You can merge later if you need to using mergecap.

permanent link

answered 05 Feb '11, 16:26

martyvis's gravatar image

martyvis
8911525
accept rate: 7%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×549
×47
×15
×9

question asked: 04 Feb '11, 23:56

question was seen: 10,389 times

last updated: 05 Feb '11, 16:26

p​o​w​e​r​e​d by O​S​Q​A