tcpdump mailing list archives
Re: tcpdump and pcap on multiple interfaces
From: "Jesse Kempf" <jkempf () davisvision com>
Date: Tue, 9 Sep 2008 22:09:23 -0400
You can do this using netgraph. I set this up a few weeks ago for dealing with ethernet taps that break out a link into two cables. I can not remember what the netgraph primitives were off the top of my head, but if you ask me off-list I can describe the setup for you. Cheers, -Jesse ----- Original Message ----- From: tcpdump-workers-owner () lists tcpdump org <tcpdump-workers-owner () lists tcpdump org> To: tcpdump-workers () lists tcpdump org <tcpdump-workers () lists tcpdump org> Sent: Tue Sep 09 22:02:04 2008 Subject: [tcpdump-workers] tcpdump and pcap on multiple interfaces Hello all, I'm trying to capture packets from two network interfaces on FreeBSD using pcap. From what I read about, a "-i any" can be used on Linux to capture from all interfaces. But FreeBSD doesnt seem to recognize it. I wonder if there's a way to capture on multiple interfaces by something like link aggregation except launching several capturing processes and merge&sort? Thank you. -- Wei, Lei Department of Computer Science University of North Carolina at Chapel Hill, NC 27599-3175 - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe. ------------------------------------------------------------------------ The information contained in this communication is intended only for the use of the recipient(s) named above. It may contain information that is privileged or confidential, and may be protected by State and/or Federal Regulations. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication, or any of its contents, is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and delete the original message and any copy of it from your computer system. If you have any questions concerning this message, please contact the sender. ------------------------------------------------------------------------ - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- tcpdump and pcap on multiple interfaces lei wei (Sep 09)
- Re: tcpdump and pcap on multiple interfaces Guy Harris (Sep 09)
- <Possible follow-ups>
- Re: tcpdump and pcap on multiple interfaces Jesse Kempf (Sep 09)