Ricky Robinson
Ricky Robinson

Reputation: 22893

two instances of tcpdump at the same time?

Are there any known problems in running two instances of tcpdump at the same time on the same network interface (with non-conflicting filters)?

I'm experiencing some weird timestamping and I thought that that could be the cause.

Upvotes: 1

Views: 4319

Answers (1)

Eric
Eric

Reputation: 2116

packet filtering is usually done in the kernel so it shouldn't cause any missed packets or out of order packets in each tcpdump process. If you're comparing the two different tcpdumps and seeing the slightly off time stamps I could see a couple of reasons for that but it's hard to say without knowing what specifically the issue is you're having.

Upvotes: 1

Related Questions