Wireshark · Ethereal-users: Re: [Ethereal-users] Would like to use Network tap and multiple promiscuous 10/100 interfaces...

[Richard Urwin <richard@xxxxxxxxxxxxxxx>]

On Friday 14 May 2004 7:12 am, Mike W wrote:
> Is there a way with Ethereal to listen in promiscuous mode to more
> than one physical interface?  I wish to use a TAP to monitor 10/100
> networks.
>
> The only solution that I can see is to run two instances of Ethereal,
> each listening to a different interface, and then using mergecap.exe
> to create a single file.  I have not as of yet tested this, and would
> like to hear if this is a method that has had some success.   Of
> course, if there is a better method I would be anxious to learn of
> it.
>
> FYI - Using Windows XP Pro operating system and Ethereal 10.3

Probably not in XP. You can do it in Linux, and probably every *nix, but 
you have to switch the interfaces into promiscuous mode manually, a 
simple command file would do it.

-- 
Richard Urwin