This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

is there any way to run Wireshark in "statistics mode", I mean without actually capturing large files? I am only interested in statistics and conversations (who is talking with each other on the network) and I don't want to capture all packets in large files.

I plan to run Wireshark in "statistic mode" for a day or even longer, so a dumpfile would become very large.

Best regards, Volker

asked 24 Jul '15, 02:28

peteshark's gravatar image

peteshark
6112
accept rate: 0%


No, Wireshark (actually, dumpcap) always writes packets to disk. If you need statistics you might want to look at NetFlow collection, which seems to be more what you need.

permanent link

answered 24 Jul '15, 03:21

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×86
×30
×10

question asked: 24 Jul '15, 02:28

question was seen: 1,145 times

last updated: 24 Jul '15, 03:21

p​o​w​e​r​e​d by O​S​Q​A