Some time back I wrote a utility called "multicap" that runs multiple instances of Tethereal and captures packets on multiple interfaces, then merges the packets. Is this something that you can use?
-Ashok > Folks, > > I have eight LANs which I monitor at once. Each LAN uses a Cisco Catalyst > switch, and has a monitoring port to allow me to see all of the traffic on > the switch. The monitoring ports on the switches are up linked to another > switch which acts as an aggregator. This allows me to monitor all traffic > on all LANs. > > Now I have a similar smaller problem, which is to monitor two LANs at the > same time. > > Does anyone know of an Ethernet card which has two interfaces, but which > presents itself as one interface (It would be nice of each port still had > it's own MAC address). This way I can still select the interface(s). > > I'm running Linux, but I do not want to capture on "Any" interface, as > described in previous postings. > > Incidentally, how do I use this "Any" feature ? > > > Many thanks > > john > --- Asok the Intern ---------------------------------------- Ashok Narayanan IOS Network Protocols, Cisco Systems 250 Apollo Drive, Chelmsford, MA 01824 Ph: 978-497-8387. Fax: 978-497-8513 (Attn: Ashok Narayanan)
