filter that shows which external servers that your computer had most communication with.

Question

im new with Wireshark and im trying too create a filter that shows me whitch external servers my computer had most communication with. Any clues?

Answer 1

It is ready-made there. Set your display filter to

 ip.addr == your.pc.ip.address

and apply it, this should show you only packets which went from or to your computer. Next, choose Statistics -> Conversations from menu, and when the window pops up, tick the box "limit to display filter". The column headers of the table are clickable, the rows are sorted increasing or decreasing by the value of the selected column. In your case, it would be "packets" or "bytes", either summary or in one direction.