Wireshark mailing list archives

Re: Multiple instances of Wireshark/ dumpcap capturing from same NICs


From: Gisle Vanem <gvanem () yahoo no>
Date: Thu, 23 Apr 2015 12:01:31 +0200

Julio Cesar Esteves Cabezas wrote:

        Is it reliable to run multiple instances of Wireshark and/or dumpcap
capturing ON THE SAME NICs in a computer ?
        No risk of a locking or of missing  / duplicate packets ?

        I usually run Wireshark on Windows 7 or 8 or Windows Server 2003 and
above.

This works fine here on Win 8.1:
  start /win /c dumpcap -c100 -i9 &^
  start /c /win dumpcap -c100 -i9 &^
  start /c /win dumpcap -c100 -i9

(1 line in cmd or in a .bat-file).

This gives me 3 console-windows with packets counting in unison. And
the resulting %TEMP\wireshark_pcapng_Ethernet_* files have the same
size and content.

--
--gv
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: