On Tue, Feb 06, 2007 at 03:41:08PM -0500, Brad Johnson wrote:
> Hello everyone - longtime Ethereal/Wireshark user, first time poster.
Welcome to the list!
> Wireshark will group packets by "TCP endpoints", in other words
> pairings of IP addresses and TCP destination ports. It will tell me
> how many packets and bytes went IP address X on port Y. That's great
> and all, but what I want to know is how many packets and bytes went to
> port Y REGARDLESS of the IP. So basically a list like:
Is a spreadsheet workable? The TCP endpoints screen has a "Copy" button
that copies the data to the clipboard in comma separated (CSV) format.
You could then filter out the ports you don't want an sum() the byte
columns left.
Steve
