> On 3. Aug 2023, at 14:59, Perttu Laine <pla...@gmail.com> wrote: > > On Tue, Aug 1, 2023 at 11:38 PM Zane C B-H <v.ve...@vvelox.net> wrote: >> >> So what is a good way to get all packets passing through that the kernel >> currently sees? Apparently any is not support on non-Linux systems and >> pflog would require adding log to all rules. Similarly only logs packets >> that match a rule. >> > > tcpdump -i em0 & tcpdump -i em1 & tcpdump -i em2 > > should work dumpcap, the capture tool used by wireshark and thark, supports capturing on multiple interfaces.
Best regards Michael > > -- > Perttu Laine, Kirvesmiespalvelu Laine Ky >
