I need to know how to capture highest network traffic originator or source on my network i have configured wire shark to monitor all my Internet traffic from that need to know who’s the Top internet users (IP) or highest internet access most visited sites can it possible from wire shark how can I configure that in this and i need this fro ongoing traffic or like filter asked 06 Jul '11, 02:44  thusitha edited 06 Jul '11, 20:12 |
One Answer:
Have you tried the Statistics/Endpoint Option? If you select the IP tab you can sort by packets or bytes and see which nodes have the most RX/TX values. Or are you looking for something else? answered 07 Jul '11, 05:21  Jasper ♦♦ |
Great that works thanks for that I got some part of result
But
What i was looking at is Presently My company we have 3M internet lease line link everyday i can see link is full of traffic and cannot identify who utilize this link i mean TOP internet users to witch site. So what I’m looking is Most internet user(IP) or everyday access site for that i have enabled monitoring only for this Internet link connected Interface from Firewall.
For that you could use Statistics/Conversations, and sort by the IP or TCP tab to see which IPs have the most packets/bytes going in and out, and by looking at the bps column you'll see the average throughput as well. If you found something interesting, use the context sensitive popup menu to filter on any selected communication to see the packets it is made of.
Thanks That works this is what neaded Thank you very much
You're welcome. You might want to accept the answer then, which will remove it from the list of open questions ;-)