This is our old Q&A Site. Please post any new questions and answers at

Hi all, how can I log IPs wich are using bandwidth above threshold?

For example I want to log computer IPs which are using more than 1Mbps of bandwith at any given point of time. How can I do this using tshark?

asked 21 May '14, 23:20

CJ22's gravatar image

accept rate: 0%

edited 22 May '14, 01:51

grahamb's gravatar image

grahamb ♦

Only capinfos can show you the average data byte/bit rate similar to the Wireshark -Statistics - Summary. It will not be in real time and the calculations are for the entire packet capture.

For network statistics look at tools like ntop or darkstat.

permanent link

answered 23 May '14, 13:26

Roland's gravatar image

accept rate: 13%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 21 May '14, 23:20

question was seen: 2,028 times

last updated: 23 May '14, 13:26

p​o​w​e​r​e​d by O​S​Q​A