Wireshark-dev: Re: [Wireshark-dev] Multiple interfaces at wireshark
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 24 Oct 2008 00:54:43 -0700

On Oct 23, 2008, at 10:56 PM, Gaurav1 Jain wrote:

How is it possible to capture multiple interfaces simultaneously when DLT_TYPE is different for these interfaces?

Multiple instances of tcpdump/dumpcap/Wireshark/TShark/etc., writing to separate files.

Then you run separate instances of tcpdump/Wireshark/TShark/etc. to look at the separate files.

(I.e., no, it can't be done in one instance of tcpdump/dumpcap/ Wireshark/TShark.)