Combining ethernet devices for sniffing

[Harry Hoffman]

Hi Ed,

There are 4 interfaces:

eth0 -> transport
eth1 -> unused
eth2 -> sniff
eth3 -> sniff

eth2,3 are plugged into a fiber tap and each card carries 1 direction of 
the bidirectional traffic.

I would like to combine them to form a single interface for things like 
tcpdump, tethereal, snort, etc. I don't want eth0,1 to be a part of it.

Thanks,
Harry


Ed Greshko wrote:
> 
...
> 
> Exactly what is the task?
> 
> If it is simply to capture traffic on all interfaces is there any issue 
> with using tcpdump with the "-i any" parameter?
>