Wireshark-users: [Wireshark-users] Filtering Options
From: "Anthony Catbagan" <[email protected]>
Date: Thu, 8 Feb 2007 17:26:01 -0800
To whom it may concern,

I want to determine a user who is using most of the bandwidth from a
router's pcap file.  I'd like to know how I can configure Wireshark where I
have a list of IP addresesses on one column, and the number of times a
particular IP address is mentioned on the pcap file.

I figured that if I see an IP address "A" shows up more than other IP
addresses, this IP Address A is doing most of the downloading.

Anthony Catbagan
Gruen Associates
Network Administrative Assistant
323-937-4270 ext 291
323-937-6001 fax