Capture two different network interfaces at the same time

[akuba123]

Hello,

I'am wondering if following setup would be possible

1x throwing star TAP

1x Packet squirrel

Action:

Connect both Ethernet cables for sniffing from throwing star to packet squirrel and capture network traffic for both interface to one pcap file

 

Appreciate if anyone can confirm this :)

 

 

[sundhaug92]

[victim]<->[packetsquirrel]<->[tap]<->[victim] ?

Yeah, the default tcpdump-payload should do that if you change "br-lan" on line 52 in payload.txt to "any"

[akuba123]

[Victim1 and Victim2]<->[tap]<->[packetsquirrel]

 

I want both Tx and Rx from Victim which is connected via TAP then i want both Rx sniff port from TAP to be inserted to a packetsquirrel and captuer both interfaces to same PCAP file

Is it possible to use both ethernet ports on packetsquirrel as IN instead of having one IN and one OUT?

 

Sorry for confusing question :)