Douglas Garstang wrote: > I think ngrep uses libpcap, and that's why it, and tethereal, can't capture from multiple interfaces. > "tethereal -i any -w file" works with debian sarge