This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I want to know how to see the total traffic (byte/packet count) to/from each IP. After I determine that, I will probably want to drill in and see the traffic by protocol/port for an IP. Basically I want to know what IP addresses are accounting for the large traffic and then will want to see what protocol is the culpret.

Is there an easy way to do this?

Thanks,

asked 15 Nov '11, 16:32

johntaves's gravatar image

johntaves
6114
accept rate: 0%

edited 15 Nov '11, 16:34


How about using "Statistics -> Endpoints" as a starting point? You can sort on any of the columns, including packets, bytes, etc.

permanent link

answered 15 Nov '11, 18:23

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×178
×115
×4

question asked: 15 Nov '11, 16:32

question was seen: 25,894 times

last updated: 15 Nov '11, 18:23

p​o​w​e​r​e​d by O​S​Q​A