Wireshark · Wireshark-dev: Re: [Wireshark-dev] Multiple interfaces at wireshark

[Guy Harris <guy@xxxxxxxxxxxx>]

On Oct 23, 2008, at 10:56 PM, Gaurav1 Jain wrote:

> How is it possible to capture multiple interfaces simultaneously  
> when DLT_TYPE is different for these interfaces?

Multiple instances of tcpdump/dumpcap/Wireshark/TShark/etc., writing  
to separate files.

Then you run separate instances of tcpdump/Wireshark/TShark/etc. to  
look at the separate files.

(I.e., no, it can't be done in one instance of tcpdump/dumpcap/ 
Wireshark/TShark.)