This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Newb question; viewing capture results

0

Hello I'm taking a networking class and have been searching all weekend for my answer and I can't figure out how to do it.

I was told to do a 1 minute capture. I did that. I had like 604 packets captured. How do I find out which source address was used the most? How do I find that break down?

Also is asks: b. What sort of traffic is using the most network resources? How do I sort that out too?

Thanks, I know its probably something simple, but I just couldn't find it on the web.

David

asked 15 Sep '12, 19:36

dstrausser83's gravatar image

dstrausser83
1112
accept rate: 0%

edited 15 Sep '12, 19:37


One Answer:

1

take a look at the statistics menu, especially the Endpoint statistics and the protocol hierarchy. With the help of those two you should be able to answer your questions.

answered 16 Sep '12, 03:04

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thank you.

[Bill Meier: Converted to a comment in keeping with the format of ask.wireshrk.org. please see the FAQ].

(16 Sep '12, 09:29) dstrausser83

You can find more information about statistics in the Wireshark User's Guide

(16 Sep '12, 22:35) joke