ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] 2 IP addresses on 1 machine

From: Steve Bertrand <steve@xxxxxxxxxx>
Date: Mon, 20 Apr 2009 12:54:44 -0400
Juan Perez wrote:
> txs Abhik, I had tried that already and the results are the same. also
> the gw would be used for outbound traffic, not inbound right?

If you are truly attempting to use two separate physical interfaces and
put them into the same IP prefix, it will not work the way you expect.

Depending on the OS, the most likely case will be that your PC will
listen for destined to 192.168.1.x/24 on the first interface that was
configured in that subnet.

As a test, disable eth1, and then run tshark on eth2. You should see the
packets end up there at that point.

A q&d physical topology map may help here as well. For instance, are you
running both NICs into a single Layer-2 device? Can you at least post
the last two octets of your real IPs, and include the netmask you are using?

Steve