This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to find upload values from two Ip Addresses

0

Hi,

I am using statistics ---> Conversations option in the Wireshark. Aim to to find how much upload is being done in-between two IP Addresses.

Source IP is 10.99.18.20 and the destination is 10.99.18.86, I took exactly 5 minutes of capture and then stopped it.

Form Conversation it showed me ~ 218111 Bytes of data. But I am not sure how to calculate the Upload value and how much bandwidth is consumed from this number.

I used the Bit calculator and it showed 1704 kilobits. But I guess this is huge value. Can any body assist me on this please ?

asked 21 Mar '13, 06:32

Kaasi's gravatar image

Kaasi
16114
accept rate: 0%


One Answer:

2

The conversation statistics already has a column for throughput on the right (labeled "bps A->B" or "bps A<-B", it's a little confusing because you have to see which way the arrow points). Have you seen that, or do you need something else?

You can also filter on the conversation you want and open the Summary Statistics. Look at the "Displayed" Column at the bottom to see throughput etc for the connection.

answered 21 Mar '13, 07:01

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Hi Jasper,

Thank you for your reply.

I tried what you've mentioned. I have a filter like the ones below:

ip.src == 10.99.18.20 and ip.dst == 10.99.18.86 and then I went to

Statistics--> Clicked on Summary. It showed a value.

I have another doubt, The problem is, this is not matching up with data shown on Statistics----> IO Graphs.

The Summary showed Average Bytes/Sec as - 43835 But the I/O graph showed as 6000 Bytes. Any idea why ?

(26 Mar '13, 00:19) Kaasi

Did you set the I/O Graph to tick as byte and tick interval to 1 second? If so, the graph should closely match the summary on averaging the graph. It is often a little hard to compare the two because the I/O graph plots over time while the summary just averages values for the whole trace.

(26 Mar '13, 07:31) Jasper ♦♦