This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Need identify top/most network users or traffic source or IP-How to configure

0

I need to know how to capture highest network traffic originator or source on my network i have configured wire shark to monitor all my Internet traffic from that need to know who’s the Top internet users (IP) or highest internet access most visited sites can it possible from wire shark how can I configure that in this and i need this fro ongoing traffic or like filter

asked 06 Jul '11, 02:44

thusitha's gravatar image

thusitha
6114
accept rate: 0%

edited 06 Jul '11, 20:12


One Answer:

1

Have you tried the Statistics/Endpoint Option? If you select the IP tab you can sort by packets or bytes and see which nodes have the most RX/TX values. Or are you looking for something else?

answered 07 Jul '11, 05:21

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Great that works thanks for that I got some part of result

But

What i was looking at is Presently My company we have 3M internet lease line link everyday i can see link is full of traffic and cannot identify who utilize this link i mean TOP internet users to witch site. So what I’m looking is Most internet user(IP) or everyday access site for that i have enabled monitoring only for this Internet link connected Interface from Firewall.

(08 Jul '11, 05:34) thusitha

For that you could use Statistics/Conversations, and sort by the IP or TCP tab to see which IPs have the most packets/bytes going in and out, and by looking at the bps column you'll see the average throughput as well. If you found something interesting, use the context sensitive popup menu to filter on any selected communication to see the packets it is made of.

(08 Jul '11, 06:07) Jasper ♦♦

Thanks That works this is what neaded Thank you very much

(08 Jul '11, 06:49) thusitha

You're welcome. You might want to accept the answer then, which will remove it from the list of open questions ;-)

(08 Jul '11, 08:05) Jasper ♦♦