Mr Shoubs Asked: 2011-03-04 03:19:27 +0800 CST2011-03-04 03:19:27 +0800 CST 2011-03-04 03:19:27 +0800 CST How to tell which interface was used for capturing data in a wireshark capture file 772 I have an old capture file that needs analysis, and I need to know which interface was chosen to capture the traffic, is there a way to find out? wireshark 3 Answers Voted SmallClanger 2011-03-04T03:39:15+08:002011-03-04T03:39:15+08:00 Maybe open it in wireshark and have a look at the MAC address of outbound packets, then match it up with the interface in question? Best Answer eric sorenson 2011-03-19T12:52:12+08:002011-03-19T12:52:12+08:00 Sorry this info isn't saved in pcap files. Some capture formats do, pcap doesn't. 45networker 2011-03-04T04:08:54+08:002011-03-04T04:08:54+08:00 Open the file in wireshark click statistics from the menu bar then summery. details are half way down the page MK
Maybe open it in wireshark and have a look at the MAC address of outbound packets, then match it up with the interface in question?
Sorry this info isn't saved in pcap files. Some capture formats do, pcap doesn't.
Open the file in wireshark
click statistics from the menu bar then summery.
details are half way down the page
MK