Ethereal-dev: Re: [Ethereal-dev] Capturing from multiple interfaces [skin the cat another way]

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ashok Narayanan <ashokn@xxxxxxxxx>
Date: Tue, 01 Oct 2002 17:52:59 -0400 (EDT)
Some time back I wrote a utility called "multicap" that runs multiple
instances of Tethereal and captures packets on multiple interfaces,
then merges the packets. Is this something that you can use?

-Ashok

> Folks,
> 
> I have eight LANs which I monitor at once.  Each LAN uses a Cisco Catalyst
> switch, and has a monitoring port to allow me to see all of the traffic on
> the switch.  The monitoring ports on the switches are up linked to another
> switch which acts as an aggregator.  This allows me to monitor all traffic
> on all LANs.
> 
> Now I have a similar smaller problem, which is to monitor two LANs at the
> same time.
> 
> Does anyone know of an Ethernet card which has two interfaces, but which
> presents itself as one interface (It would be nice of each port still had
> it's own MAC address).  This way I can still select the interface(s).
> 
> I'm running Linux, but I do not want to capture on "Any" interface, as
> described in previous postings.
> 
> Incidentally, how do I use this "Any" feature ?
> 
> 
> Many thanks
> 
> john
> 



--- Asok the Intern ----------------------------------------
Ashok Narayanan
IOS Network Protocols, Cisco Systems
250 Apollo Drive, Chelmsford, MA 01824
Ph: 978-497-8387.  Fax: 978-497-8513 (Attn: Ashok Narayanan)