This is our old Q&A Site. Please post any new questions and answers at


Lately having slow internet in the office at random times. This might be network problem or one or more workstations use too much bandwidth.

I already tested that I can Wireshark capture between the modem and the router using Windows XP laptop with 2 NICs bridged.

I want to keep this capture for long time, maybe 1-2 days, and I want to find out what workstation is causing the slowdown.

Please advice how to prepare my long capture and how to scan it to accomplish what I want. Or maybe there is another tool to do this?

Thanks, JM

asked 16 Aug '11, 06:53

joem2's gravatar image

accept rate: 0%

Since you've already checked your capture setup, you are ready to start capturing and analyzing some traffic. You'll probably want to use dumpcap directly to avoid an out-of-memory problem during capture (See this answer for an example of using dumpcap).

Once you've got some capture files, you can use entries in the statistics menu to do what you want, as indicated in this answer to a similar question. Using that information, you should be able to identify which hosts are consuming the most bandwidth.

permanent link

answered 16 Aug '11, 10:56

multipleinterfaces's gravatar image

accept rate: 12%

Thanks. I am still learning this stuff.

permanent link

answered 19 Aug '11, 13:12

joem2's gravatar image

accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 16 Aug '11, 06:53

question was seen: 14,801 times

last updated: 19 Aug '11, 13:12

p​o​w​e​r​e​d by O​S​Q​A