I am performing capture on all devices, and end with messed output. It would be helpfull to have additional column with interface name. Is there a way to add such column to packet list view? asked 04 Feb '11, 23:56  Witek |
3 Answers:
The Linux 'all' interface doesn't provide that information in its cooked capture, therefore it can't be presented. A simultaneous capture into pcap-ng would allow for this, but that hasn't been developed, yet. answered 05 Feb '11, 01:07  Jaap ♦ |
Not even minor number of interfaces? Shame. answered 05 Feb '11, 01:47 Witek |
If you have multiple interfaces and want to keep traffic separated, just launch multiple instances of dumpcap and capture from each interface to a separate file. You can merge later if you need to using mergecap. answered 05 Feb '11, 16:26  martyvis |
