Wireshark · Wireshark-users: [Wireshark-users] number of peers per endpoint?

[Anne Blankert <anne.blankert@xxxxxxxxx>]

Hello List,

For network troubleshooting, I often I use the statistics->conversations 
overview.

However, one type of network problem are endpoints that are misbehaving 
by connecting to many different peers (scanners, worms, peer-to-peer 
gotten out of hand etc.). These endpoints may not be generating much 
traffic, but they are creating many sessions and they are suspicious by 
the nature of their behaviour..

Does Wireshark provide an easy way to get the number of peers per 
endpoint, preferably sortable by number of peers?

If not:
In the overview statitistics->endpoints, I was looking for a column 
#of_peers or something like that. But there is no such column. Should be 
easy to calculate I think? Could this be a new feature to request? For 
ethernet it could show the number of ethernet peers per MAC, for ipv4 
the number of ipv4 peers per ipv4, voor tcp, the number of tcp-sessions, 
etc.

Anne Blankert