 | 1 | initial version |
You could, depending on the definition of conversation. You would have to capture meta data anyway in order to characterise the conversation and to gather data size information. Once you have that you can just refrain from capturing the actual data.
One example would be capturing a TCP stream, whereby you capture the frames up to the TCP payload. Then from the headers you work out the amount of exchanged data, without collecting the data itself.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
