Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Monitor mode [Was: TCP Conversations Question]

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Jake Peavy" <djstunks@xxxxxxxxx>
Date: Sat, 5 Apr 2008 08:31:04 -0600

On 4/4/08, Hansang Bae <hbae@xxxxxxxxxx> wrote:
Tom.Saurer wrote:
> Is there a way to have Wireshark only gather IP conversation stats
> (source IP/Port and destination IP/Port) as it watches a nic? We don't
> need the full packet information. We need to gather this data for
> several weeks and it would be to hard to analyze a packet capture to
> pull that information.

There is no "Monitor" function built into Wireshark.  It was actually
discussed during Sharkfest (about adding support for this support).
 
You can't collect to /dev/null?  I don't think I've ever tried.
 
-jp
 
 
  • Follow-Ups:
    • Re: [Wireshark-users] Monitor mode [Was: TCP Conversations Question]
      • From: Hansang Bae
  • Prev by Date: Re: [Wireshark-users] A little help with a connection issue required
  • Next by Date: Re: [Wireshark-users] Devices on MAC
  • Previous by thread: Re: [Wireshark-users] Looking for some help or advice with an issue
  • Next by thread: Re: [Wireshark-users] Monitor mode [Was: TCP Conversations Question]
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation