I know that before capturing packets, I can select specific interface.

I wonder is there any filter to distinguish different interfaces after I capture packets?

That is, at the beginning, I capture packets of all interfaces.

After that, I can using "some filter" for different interfaces.

Does anyone know about it?

link|improve this question
feedback

migrated from stackoverflow.com Aug 18 '11 at 5:10

This question came from our site for professional and enthusiast programmers.

1 Answer

up vote 0 down vote accepted

The "Linux cooked" capture mode doesn't distinguish in any way between packets from different interfaces. You can only filter the results by IP address.

link|improve this answer
Thanks for your reply! – joyce7216 Aug 18 '11 at 8:22
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.