Wireshark · Wireshark-users: [Wireshark-users] Multi-point capture

[Akash Baid <akashbaid@xxxxxxxxx>]

Are there tools to capture traffic from two ends of a flow and only see the packets that are from one end to the other? It is often useful to capture from the client and server side and analyze if there were packet drops or other problems. This requires opening the two capture files and manually filtering out or filtering in only relevant client to server packets in both captures - does any existing tool automate the process?

Some links I found from a quick search:

• https://sharkfestus.wireshark.org/sharkfest.13/presentations/PA-17_TCP-Performance-Problem-Analysis-Through-Multiple-Network-Segments_Bongertz-and-Landstrom.pdf

• https://blog.packet-foo.com/2015/02/working-with-multi-point-captures/