Hello,
Have you any ideas how can I capture traffic on two interfaces of RB450G (4.14 OS) router simultaneously? I use tool sniffer, but I see that I can choose interface=all or interface=ether1 (for example). I need get ether1 and ether2 at the same moment. If I take interface=all I have no MAC address and I cannot distinguish which packets are from ether1 and which packets are from ether2 (notice that the same packets flow through two interfaces of router).
Thanks.
If the 2 interfaces is not in bridge, I don’t think its possible. Actually. I have newer seen any other system that make this possible. (it might exist, update me in this)
If you have Linux router, then it is no problem. tcpdump will capture data on two interfaces simultanously. You open two terminals and write twa commmand: on the first terminal command to capture one interface, on the second terminal - command which will be capture second interface. On the Mikrotik I cannot do this because if I change sniffer tool settings the changes concern Mikrotik, not a sessions. Apparently Mikrotik router has got one instance of capturing and it is his big problem.
Or maybe I’m wrong and there is any possibility?