Sniff on all interfaces won't filter.

[zwilcox]

I'm attempting to sniff on all interfaces with some filtering.
sniff(prn = lambda x: x.show(), filter='src host 10.0.1.1')
If I remove the filter with:
sniff(prn = lambda x: x.show()) Then I start sniffing on interfaces.
I know the filter is working because when I specify the interface, everything works:
sniffing works on the interface and is filtering on that interface.

sniff(iface='some interface', filter='src host 10.0.1.1', prn= lambda x: x.show())

[guedou]

By default, sniff() sniffs on the interface defined in conf.iface. I don’t think that it is able to sniff on all network interfaces.

[gpotter2]

However, it is able to sniff multiple interfaces at the same time. Have a look at help(sniff)

      >>> sniff(filter="arp")
      >>> sniff(lfilter=lambda pkt: ARP in pkt)
      >>> sniff(iface="eth0", prn=Packet.summary)
      >>> sniff(iface=["eth0", "mon0"],
      ...       prn=lambda pkt: "%s: %s" % (pkt.sniffed_on,
      ...                                   pkt.summary()))
      >>> sniff(iface={"eth0": "Ethernet", "mon0": "Wifi"},
      ...       prn=lambda pkt: "%s: %s" % (pkt.sniffed_on,
      ...                                   pkt.summary()))

[zwilcox]

The documentation states:

Sniffing
We can easily capture some packets or even clone tcpdump or tshark. Either one interface or a list of interfaces to sniff on can be provided. If no interface is given, sniffing will happen on every interface

http://scapy.readthedocs.io/en/latest/usage.html?highlight=sniff

So sniffing should happen on every interface with something like:

sniff(filter="arp")

[guedou]

The documentation must be fixed. By default, Scapy sniffs on conf.iface. Thanks for reporting the issue.