Ethereal-users: Re: [Ethereal-users] Sniffing in a switched network - Taps or Spans

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 30 Apr 2004 12:21:43 -0700
On Fri, Apr 30, 2004 at 10:08:57PM +1000, Ronnie Sahlberg wrote:
> From: "Dolbow, Bill"
> ...
> > 1. If I tap my aggregation points (firewalls, Content switches, etc)
> > can ethereal on RedHat ES3.0 able to combine the transmit and receive
> feeds
> > into one capture?
> 
> Not with Ethereal   but the tool  MERGECAP.EXE in the ethereal distribution
> will do this for you.

Not on Red Hat, it won't - but "mergecap" will. :-)