On 10/16/2014 09:19 AM, Arne Bier (abier) wrote:
Hi Daniel

Sadly the -i does not work with netsniff-ng  (-i is used to read files!)

[root@eapsim-01 abier]# netsniff-ng -i any
E: Can't open file: No such file or directory

Sorry, I was referring to more recent Git versions:

  git clone git://github.com/netsniff-ng/netsniff-ng.git

You can run ./configure script and then build it via make.
The version you refer to is unfortunately quite outdated
and iirc doesn't have this feature.

[root@eapsim-01 abier]# netsniff-ng -v
netsniff-ng 0.5.5.0, the packet sniffing beast
http://www.netsniff-ng.org
Compiled with transmit ring functionality :)
Please report bugs to <[email protected]>
Copyright (C) 2009, 2010 Daniel Borkmann and Emmanuel Roullit
License: GNU GPL version 2
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

[root@eapsim-01 abier]# netsniff-ng -I
Networking devs
  (000) lo => 127.0.0.1
         hw: 0:0:0:0:0:0
         stat: up running, loops back
         mtu: 16436 Byte
         irq: -1
  (001) eth3 => 10.67.8.73
         hw: 0:50:56:a8:1e:12
         driver: vmxnet3 1.1.30.0-k-NAPI
         stat: up running
         mtu: 1500 Byte
         irq: 0
         bitrate: 10000 Mb/s
  (002) eth0 => 172.16.10.234
         hw: 0:50:56:a8:39:43
         driver: vmxnet3 1.1.30.0-k-NAPI
         stat: up running
         mtu: 1500 Byte
         irq: 0
         bitrate: 10000 Mb/s
  (003) eth1 => 10.67.20.234
         hw: 0:50:56:a8:3b:91
         driver: vmxnet3 1.1.30.0-k-NAPI
         stat: up running
         mtu: 1500 Byte
         irq: 0
         bitrate: 10000 Mb/s
  (004) eth2 => 10.67.2.234
         hw: 0:50:56:a8:63:30
         driver: vmxnet3 1.1.30.0-k-NAPI
         stat: up running
         mtu: 1500 Byte
         irq: 0
         bitrate: 10000 Mb/s
  (005) eth4 => 10.67.9.73
         hw: 0:50:56:a8:67:c7
         driver: vmxnet3 1.1.30.0-k-NAPI
         stat: up running
         mtu: 1500 Byte
         irq: 0
         bitrate: 10000 Mb/s


[root@eapsim-01 abier]# netsniff-ng --dev any
netsniff-ng 0.5.5.0 -- pid (18707)
nice (0), scheduler (0 prio 0)
12 of 12 CPUs online, affinity bitstring (111111111111)
E: ioctl: cannot determine dev number for any: No such device

[root@eapsim-01 abier]# netsniff-ng --dev all
netsniff-ng 0.5.5.0 -- pid (18712)
nice (0), scheduler (0 prio 0)
12 of 12 CPUs online, affinity bitstring (111111111111)
E: ioctl: cannot determine dev number for all: No such device
[root@eapsim-01 abier]#


-----Original Message-----
From: Daniel Borkmann [mailto:[email protected]]
Sent: 16 October 2014 01:18
To: [email protected]
Cc: Arne Bier (abier)
Subject: Re: [netsniff-ng] Does netsniff-ng support capturing on multiple 
interfaces?

On 10/15/2014 11:39 AM, Arne Bier wrote:
Hi

Assuming I have more than one ethernet interface on my linux server (e.g.
eth0 and eth1) I have tried -dev eth0 -dev eth1  and although the
syntax seems legal, it only captures from the final -dev argument.

I have used tcpdump -i any   in the past and I am looking for some way of
doing the same with netsniff-ng

Have you tried `-i any` on netsniff-ng? That should work here too.

regards
Arne



--
You received this message because you are subscribed to the Google Groups 
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to