Wireshark – identifying multiple interfaces

2 01 2013

I’ve always been a bit annoyed when you have several NICs in a machine and Wireshark chooses to show you the IPv6 address by default when choosign an interface to capture on:

Wireshark showing ipv6 addresses by default

Wireshark showing ipv6 addresses by default

 

 

 

 

 

It’s annoying because these are link-local addresses and I don’t know which one is which.  And on top of that the NICs are of the same type, so I don’t get a clue from that either.  I suppose I could be more organised and rename them, but I never seem to get round to that.

Turns out, that if you click where the IP address is, it will scroll through the various addresses on the interface you’re clicking.  Maybe this is something everyone knows, but it was new to me:

Wireshark showing v4 address

Wireshark showing v4 address

 

Advertisements