Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Packet capture on one IP address?

From: Shannon Adams <shannon_adams68@xxxxxxxxx>
Date: Thu, 12 Mar 2009 09:19:45 -0700 (PDT)
Thanks to all who helped me with the question below.  If I see one IP address is a "top talker", how do I zone in on that one IP and see what they are doing?  I have tried creating filters by IP and haven't had much luck.  Thanks for any help.



----- Original Message ----
From: Shannon Adams <shannon_adams68@xxxxxxxxx>
To: wireshark-users@xxxxxxxxxxxxx
Sent: Thursday, March 12, 2009 9:09:01 AM
Subject: "Top Talkers" using Wireshark?

I have been reviewing the Network Instruments Observer product and the most useful feature for me is the "Top Talkers" screen.  I can start a packet capture and sort by total bytes or packets.  

I just discovered and installed Wireshark this morning, but I cannot seem to locate a "Top Talkers" type tool.  If I it has that, it would save me a small fortune in having to purchase a license for Network Observer.  Does Wireshark have this feature?  If so, can someone please lead me in the right direction on how to use it?

Thanks in advance,
Shannon