TomSu_93471
Feb 01, 2012Nimbostratus
Simultaneous tcpdump capture for two different physical intf 1.1 and 1.2
Hi,
need some help on tcpdump tracing topics. I want to trace two physicals 1.1 and 1.2
at the same time, but this seems not possible ?
1) one session goes ok:
[root@f5-1:Active] tmp tcpdump -s0 -ni 1.1:nnn -w /var/tmp/1.1.pcap tcpdump: listening on 1.1:nnn, link-type EN10MB (Ethernet), capture size 65535 bytes
2) but the 2nd one fails soon after starting:
[root@f5-1:Active] tmp tcpdump -s0 -ni 1.2:nnn -w /var/tmp/1.2.pcap tcpdump: listening on 1.2:nnn, link-type EN10MB (Ethernet), capture size 65535 bytes tcpdump: pcap_loop: Error: Interface packet capture busy
Trace on 0.0 works ok, however I don't see in there references to physical intf numbers, so it will be hard to see real traffic flow what is exactly what I need (STP BPDUs issue between Cisco and f5)
Any help on this topics appreciated,
Cheers
Tom