This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Can I run two tshark instances analysing different ports?

0

I ran an instance of tshark to analyse data on one tcp port, and set to terminate after a certain amount of data was received. However, I seem to have over estimated how long it would take for that amount of data to be received.
I now want to analyse a different tcp port, can I just start another instance of tshark monitoring the other port, or do I need to wait for the first instance to complete its work?

asked 04 May '16, 03:49

elektrovert's gravatar image

elektrovert
21●4●4●8
accept rate: 0%

One Answer:

0

Yes, you can run multiple instances if you want. It just puts more stress on the capturing system.

answered 04 May '16, 03:52

Jasper's gravatar image

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%