Wireshark-dev: Re: [Wireshark-dev] Problems with capturing on multiple interfaces
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Chris Maynard <chris.maynard@xxxxxxxxx>
Date: Thu, 19 May 2011 17:40:45 +0000 (UTC)
Additional feedback (pigging-backing off Joerg's post):
1) When capturing on multiple interfaces, the -n option is required in order to
use pcapng instead of pcap.  But if it's omitted - accidentally or not - could
it just be automatically assumed?

2) The tempfile name includes the name of the interface.  But, if we're
capturing on multiple interfaces, I would think we'd want to rename it, but how
best to do that?  We could string the interface names together, but that could
result in lengthy tempfile names, especially for Windows), or we could use part
of each interface's name or use a generic "multiple_interfaces" name, or
something else???  The solution could differ depending on OS.  Stringing
together eth0_eth1_lo is nice and short, but not the case for Windows with long
names like, "NPF_GenericDialupAdapter", "07BB3785-079D-4AB5-AE27-79723D20A0CF", 
etc.