This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

capture simultaneously in tshark

0	is it possible to read 2 captured file in tshark simultaneously? or is it possible to capture simultaneously from multiple interfaces at once? capture simultaneously tshark asked 11 May '17, 00:40 ghader 61●14●16●20 accept rate: 0%

One Answer:

yes, with two tshark instances running at the same time. You cannot read 2 capture files into the same tshark instance unless you merge them first via mergecap.
yes, either capturing on two (or more) interfaces into a single pcap, or with multiple tshark instances capturing on single interfaces

answered 11 May '17, 00:43

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%