Wireshark · Wireshark-users: Re: [Wireshark-users] Multiple instances of Wireshark/ dumpcap capturing from same NICs

[Gisle Vanem <gvanem@xxxxxxxx>]

Julio Cesar Esteves Cabezas wrote:

> 	Is it reliable to run multiple instances of Wireshark and/or dumpcap
> capturing ON THE SAME NICs in a computer ?
> 	No risk of a locking or of missing  / duplicate packets ?
>
> 	I usually run Wireshark on Windows 7 or 8 or Windows Server 2003 and
> above.

This works fine here on Win 8.1:
  start /win /c dumpcap -c100 -i9 &^
  start /c /win dumpcap -c100 -i9 &^
  start /c /win dumpcap -c100 -i9

(1 line in cmd or in a .bat-file).

This gives me 3 console-windows with packets counting in unison. And
the resulting %TEMP\wireshark_pcapng_Ethernet_* files have the same
size and content.

--
--gv