Re: tcpdump and pcap on multiple interfaces

["Jesse Kempf" <jkempf () davisvision com>]

You can do this using netgraph. I set this up a few weeks ago for dealing with ethernet taps that break out a link into 
two cables.

I can not remember what the netgraph primitives were off the top of my head, but if you ask me off-list I can describe 
the setup for you.
 
Cheers,
-Jesse


----- Original Message -----
From: tcpdump-workers-owner () lists tcpdump org <tcpdump-workers-owner () lists tcpdump org>
To: tcpdump-workers () lists tcpdump org <tcpdump-workers () lists tcpdump org>
Sent: Tue Sep 09 22:02:04 2008
Subject: [tcpdump-workers] tcpdump and pcap on multiple interfaces

Hello all,

I'm trying to capture packets from two network interfaces on FreeBSD using
pcap. From what I read about,
a "-i any" can be used on Linux to capture from all interfaces. But FreeBSD
doesnt seem to recognize it.
I wonder if there's a way to capture on multiple interfaces by something
like link aggregation
except launching several capturing processes and merge&sort?

Thank you.

-- 
Wei, Lei
Department of Computer Science
University of North Carolina at Chapel Hill,
NC 27599-3175
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.



------------------------------------------------------------------------
The information contained in this communication is intended
only for the use of the recipient(s) named above. It may
contain information that is privileged or confidential, and
may be protected by State and/or Federal Regulations. If
the reader of this message is not the intended recipient,
you are hereby notified that any dissemination,
distribution, or copying of this communication, or any of
its contents, is strictly prohibited. If you have received
this communication in error, please return it to the sender
immediately and delete the original message and any copy
of it from your computer system. If you have any questions
concerning this message, please contact the sender.
------------------------------------------------------------------------

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.