Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

You could, depending on the definition of conversation. You would have to capture meta data anyway in order to characterise the conversation and to gather data size information. Once you have that you can just refrain from capturing the actual data.

One example would be capturing a TCP stream, whereby you capture the frames up to the TCP payload. Then from the headers you work out the amount of exchanged data, without collecting the data itself.