This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello I'm taking a networking class and have been searching all weekend for my answer and I can't figure out how to do it.

I was told to do a 1 minute capture. I did that. I had like 604 packets captured. How do I find out which source address was used the most? How do I find that break down?

Also is asks: b. What sort of traffic is using the most network resources? How do I sort that out too?

Thanks, I know its probably something simple, but I just couldn't find it on the web.

David

asked 15 Sep '12, 19:36

dstrausser83's gravatar image

dstrausser83
1112
accept rate: 0%

edited 15 Sep '12, 19:37


take a look at the statistics menu, especially the Endpoint statistics and the protocol hierarchy. With the help of those two you should be able to answer your questions.

permanent link

answered 16 Sep '12, 03:04

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thank you.

[Bill Meier: Converted to a comment in keeping with the format of ask.wireshrk.org. please see the FAQ].

(16 Sep '12, 09:29) dstrausser83

You can find more information about statistics in the Wireshark User's Guide

(16 Sep '12, 22:35) joke
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×248
×115
×40
×6

question asked: 15 Sep '12, 19:36

question was seen: 2,566 times

last updated: 16 Sep '12, 22:35

p​o​w​e​r​e​d by O​S​Q​A