Hi Daniel Sadly the -i does not work with netsniff-ng (-i is used to read files!)
[root@eapsim-01 abier]# netsniff-ng -i any E: Can't open file: No such file or directory [root@eapsim-01 abier]# netsniff-ng -v netsniff-ng 0.5.5.0, the packet sniffing beast http://www.netsniff-ng.org Compiled with transmit ring functionality :) Please report bugs to <[email protected]> Copyright (C) 2009, 2010 Daniel Borkmann and Emmanuel Roullit License: GNU GPL version 2 This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. [root@eapsim-01 abier]# netsniff-ng -I Networking devs (000) lo => 127.0.0.1 hw: 0:0:0:0:0:0 stat: up running, loops back mtu: 16436 Byte irq: -1 (001) eth3 => 10.67.8.73 hw: 0:50:56:a8:1e:12 driver: vmxnet3 1.1.30.0-k-NAPI stat: up running mtu: 1500 Byte irq: 0 bitrate: 10000 Mb/s (002) eth0 => 172.16.10.234 hw: 0:50:56:a8:39:43 driver: vmxnet3 1.1.30.0-k-NAPI stat: up running mtu: 1500 Byte irq: 0 bitrate: 10000 Mb/s (003) eth1 => 10.67.20.234 hw: 0:50:56:a8:3b:91 driver: vmxnet3 1.1.30.0-k-NAPI stat: up running mtu: 1500 Byte irq: 0 bitrate: 10000 Mb/s (004) eth2 => 10.67.2.234 hw: 0:50:56:a8:63:30 driver: vmxnet3 1.1.30.0-k-NAPI stat: up running mtu: 1500 Byte irq: 0 bitrate: 10000 Mb/s (005) eth4 => 10.67.9.73 hw: 0:50:56:a8:67:c7 driver: vmxnet3 1.1.30.0-k-NAPI stat: up running mtu: 1500 Byte irq: 0 bitrate: 10000 Mb/s [root@eapsim-01 abier]# netsniff-ng --dev any netsniff-ng 0.5.5.0 -- pid (18707) nice (0), scheduler (0 prio 0) 12 of 12 CPUs online, affinity bitstring (111111111111) E: ioctl: cannot determine dev number for any: No such device [root@eapsim-01 abier]# netsniff-ng --dev all netsniff-ng 0.5.5.0 -- pid (18712) nice (0), scheduler (0 prio 0) 12 of 12 CPUs online, affinity bitstring (111111111111) E: ioctl: cannot determine dev number for all: No such device [root@eapsim-01 abier]# -----Original Message----- From: Daniel Borkmann [mailto:[email protected]] Sent: 16 October 2014 01:18 To: [email protected] Cc: Arne Bier (abier) Subject: Re: [netsniff-ng] Does netsniff-ng support capturing on multiple interfaces? On 10/15/2014 11:39 AM, Arne Bier wrote: > Hi > > Assuming I have more than one ethernet interface on my linux server (e.g. > eth0 and eth1) I have tried -dev eth0 -dev eth1 and although the > syntax seems legal, it only captures from the final -dev argument. > > I have used tcpdump -i any in the past and I am looking for some way of > doing the same with netsniff-ng Have you tried `-i any` on netsniff-ng? That should work here too. > regards > Arne > -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
