Dear all,
I'm implementing the support of simultaniously
capturing from multiple interfaces in dumpcap.
The first step, the support of writing in pcapng is done.
Now I need to be able to specify multiple interfaces
on the command line and also provide interface
specific options. I think something like
dumpcap -n -i lo0 -f udp -s 100 -y whatever -i en0 -s 0 -f sctp - y
whatever
should be possible. So I would like to require that you
need to specify the -i options before -f, -s, and -y.
The values specified by -f, -s, and -y only apply to
the interface specified before using the -i option.
It is also required to specify -n for using pcapng.
What do you think? Is this acceptable?
Or would you prefer to have only one capture filter
and snap length for all interfaces? Having the same
link-type makes no sense.
I also would like to have either
one pipe
or a single or multiple interfaces.
But I think that is not a problem.
Best regards
Michael
