Wireshark-users: Re: [Wireshark-users] Statistics grouped by port?

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 6 Feb 2007 11:26:12 -0800

On Tue, Feb 06, 2007 at 03:41:08PM -0500, Brad Johnson wrote:

> Hello everyone - longtime Ethereal/Wireshark user, first time poster.

Welcome to the list!

> Wireshark will group packets by "TCP endpoints", in other words 
> pairings of IP addresses and TCP destination ports. It will tell me 
> how many packets and bytes went IP address X on port Y. That's great 
> and all, but what I want to know is how many packets and bytes went to 
> port Y REGARDLESS of the IP. So basically a list like:

Is a spreadsheet workable?  The TCP endpoints screen has a "Copy" button 
that copies the data to the clipboard in comma separated (CSV) format.  
You could then filter out the ports you don't want an sum() the byte 
columns left.


Steve