Re: tcptrace Merging tcpdump files

From: Thomas Bohnert (bohnert@ccrle.nec.de)
Date: 06/23/03


From: Thomas Bohnert <bohnert@ccrle.nec.de>
Subject: Re: tcptrace Merging tcpdump files
Date: Mon, 23 Jun 2003 14:18:58 +0200
Message-Id: <200306231418.58258.bohnert@ccrle.nec.de>

Are you not able to capture the traffic on both interfaces simultaneously.....
"tcpdump -i any .... " maybe you are not working wth LInux .....

man tcpdump:

--- snip ----
 -i Listen on interface. If unspecified, tcpdump
              searches the system interface list for the lowest
              numbered, configured up interface (excluding loop­
              back). Ties are broken by choosing the earliest
              match.

              On Linux systems with 2.2 or later kernels, an
              interface argument of ``any'' can be used to cap­
              ture packets from all interfaces. Note that cap­
              tures on the ``any'' device will not be done in
              promiscuous mode.

--- snip ----

On Monday 23 June 2003 12:04, George Xilouris wrote:
> Hello all, I have to tcpdump files one for each of the two interfaces I
> have. The first dump file is the downlink and the second is the uplink
> ... I want to compine them in order to analyse them with tcptrace. I've
> tried tcpslice " tcpslice -w output file1 file2 " but the output
> consists only of the first file plus packets from the second file that
> have timestamps out of the limits of the first file.
> Do you know how can I do this ... ?
>
> Thanx in advance .....
>
>
> George
>
>
> ---------------------------------------------------------------------------
>- To unsubscribe, send a message with body containing "unsubscribe tcptrace"
> to majordomo@tcptrace.org.

----------------------------------------------------------------------------
To unsubscribe, send a message with body containing "unsubscribe tcptrace" to
majordomo@tcptrace.org.



This archive was generated by hypermail 2.1.7 : 06/23/03 EDT