If you use ntp on all the machines you shouldn't have any problem merging the capturefiles.
/ Tomas
On Thu, 10 Apr 2003, Alan Hawrylyshen wrote:
Klaus Darilion wrote:
[snip]
Hello!
How do you capture from different networks? Is it possible to input several dump-files into the tool, one captured at the caller site and one captured at the callee site?
regards, Klaus
In theory you can use mergecap (part of ethereal) to merge captures from different networks. In practise this is difficult b/c you are likely missing a common timebase to determine the correct relative ordering.
Locally to sniff on N networks, I put N extra network adaptor cards in my desktop machine and do NOT configure the IP level interface. Using them strictly as monitoring interfaces, this ''multihomed'' machine can sniff all N networks at the same time, solving the time-base problem.
HTH,
Alan Hawrylyshen Jasomi Networks Inc.
-- Got a SIMPLE implementation, come to the 1st SIMPLE interop! (SIMPLEt) http://simplet.jasomi.com/ -- Registration closes April 15, 2003.
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers