This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

capture simultaneously in tshark

0

is it possible to read 2 captured file in tshark simultaneously? or is it possible to capture simultaneously from multiple interfaces at once?

asked 11 May '17, 00:40

ghader's gravatar image

ghader
61141620
accept rate: 0%


One Answer:

1
  1. yes, with two tshark instances running at the same time. You cannot read 2 capture files into the same tshark instance unless you merge them first via mergecap.
  2. yes, either capturing on two (or more) interfaces into a single pcap, or with multiple tshark instances capturing on single interfaces

answered 11 May '17, 00:43

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%