Hi, Lately having slow internet in the office at random times. This might be network problem or one or more workstations use too much bandwidth. I already tested that I can Wireshark capture between the modem and the router using Windows XP laptop with 2 NICs bridged. I want to keep this capture for long time, maybe 1-2 days, and I want to find out what workstation is causing the slowdown. Please advice how to prepare my long capture and how to scan it to accomplish what I want. Or maybe there is another tool to do this? Thanks, JM asked 16 Aug '11, 06:53 joem2 |
2 Answers:
Since you've already checked your capture setup, you are ready to start capturing and analyzing some traffic. You'll probably want to use dumpcap directly to avoid an out-of-memory problem during capture (See this answer for an example of using dumpcap). Once you've got some capture files, you can use entries in the statistics menu to do what you want, as indicated in this answer to a similar question. Using that information, you should be able to identify which hosts are consuming the most bandwidth. answered 16 Aug '11, 10:56 multipleinte... |
Thanks. I am still learning this stuff. answered 19 Aug '11, 13:12 joem2 |