This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Reporting based off mac addresses

0

Wireshark newbie - I want to see which mac addresses are hogging the traffic in our network. Is there a way to get a report that gives traffic stats over time grouped by mac address.

asked 31 Jan '14, 04:12

mannymisc's gravatar image

mannymisc
1111
accept rate: 0%


One Answer:

2

Yes, go to:

Statistics -> Conversations -> Ethernet [a Tab]

Then sort the entries according to the column "Bytes".

Hint: Uncheck the option 'Name resolution' (lower, left corner) if you want to see the 'raw' (untranslated) MAC addresses.

Regards
Kurt

answered 31 Jan '14, 05:33

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%