Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add interface name to packet output for tcpdump -i any #415

Closed
moritzmann1 opened this issue Dec 17, 2014 · 3 comments
Closed

Add interface name to packet output for tcpdump -i any #415

moritzmann1 opened this issue Dec 17, 2014 · 3 comments

Comments

@moritzmann1
Copy link

When using tcpdump -i any, packets are always displayed for each interface they pass. It would be very helpful to have an option to add the interface name in front of the captured packet.

E.g.:

14:40:16.653326 eth0.111 IP 10.1.1.1.50888 > 10.1.1.2.22: Flags [.], ack 2192, win 4059, options [nop,nop,TS val 803408436 ecr 679498], length 0
14:40:16.653326 eth0.112 IP 10.1.1.1.50888 > 10.1.1.2.22: Flags [.], ack 2192, win 4059, options [nop,nop,TS val 803408436 ecr 679498], length 0
14:40:17.653674 eth0.112 IP 10.1.1.2.22 > 10.1.1.1.50888: Flags [P.], seq 2192:2548, ack 37, win 385, options [nop,nop,TS val 679749 ecr 803408436], length 356
14:40:17.653674 eth0.111 IP 10.1.1.2.22 > 10.1.1.1.50888: Flags [P.], seq 2192:2548, ack 37, win 385, options [nop,nop,TS val 679749 ecr 803408436], length 356

@infrastation
Copy link
Member

Please see #296.

@rrva
Copy link

rrva commented Sep 11, 2016

Workaround:

http://sebastianhaas.de/anydump-release/

@matonga
Copy link

matonga commented Mar 23, 2018

The suggested workaround (by Sebastian Haas) is great, but the output is not sorted by timestamp.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

4 participants