This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to display interface name when capturing all interfaces?

0

I am performing capture on all devices, and end with messed output. It would be helpfull to have additional column with interface name.

Is there a way to add such column to packet list view?

asked 04 Feb '11, 23:56

Witek's gravatar image

Witek
6113
accept rate: 0%


3 Answers:

1

The Linux 'all' interface doesn't provide that information in its cooked capture, therefore it can't be presented.

A simultaneous capture into pcap-ng would allow for this, but that hasn't been developed, yet.

answered 05 Feb '11, 01:07

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

0

Not even minor number of interfaces? Shame.

answered 05 Feb '11, 01:47

Witek's gravatar image

Witek
6113
accept rate: 0%

0

If you have multiple interfaces and want to keep traffic separated, just launch multiple instances of dumpcap and capture from each interface to a separate file. You can merge later if you need to using mergecap.

answered 05 Feb '11, 16:26

martyvis's gravatar image

martyvis
8911525
accept rate: 7%