Hi Guys, I'm new in wireshark. Lets say I want to trace packet from two nic together? What is the right command.. If I want to trace from 1 nic below is the command..but if i want to trace from 2 nic? dumpcap -i NIC Thank you in advance asked 09 Nov '15, 23:55  wunan edited 09 Nov '15, 23:56 |
One Answer:
from https://www.wireshark.org/docs/man-pages/dumpcap.html: -i < capture interface >|rpcap://< host >/< capture interface >|[email protected]< host >:< port >|- ... This option can occur multiple times. When capturing from multiple interfaces, the capture file will be saved in pcap-ng format. so simply dumpcap -i nic1 -i nic2 answered 10 Nov '15, 00:19  sindy |
Thank you very much =D