On Thu, 13 Jul 2017 19:37:52 +0200, Tollef Fog Heen <tfh...@err.no> wrote: >]] Marc Haber >> My finger memory will still type tcpdump -i eth0 before the brain can >> intervene ten years from now. > >In that particular case, I'll recommend you either leaving out the -i >switch completely or just doing `-i any`. I find it's rare I care about >what interface traffic happens on. YMMV, of course.
As a general paranoid type of guy, my foot nails curl up when I see a tcpdump command line without -i. I don't know where this originates from. Did tcpdump support the "listen on all interfaces" semantics without -i from the beginning? Greetings Marc -- -------------------------------------- !! No courtesy copies, please !! ----- Marc Haber | " Questions are the | Mailadresse im Header Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/ Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834