 | 1 | initial version |
Wireshark may not be the best tool for this task. Wireshark shows the bandwidth utilization in the capture. The packet capture needs to begin prior to the event and be saved afterward. You will have to keep starting new captures until you are sure you have the correct data. The packet capture could have a huge amount of packets, which will probably slow down Wireshark
A good option is to install network monitoring software. The software can monitor network traffic for months at a time. The software can then use the data to create various network performance reports. If there are anomalies in the report, install a sniffer to capture packets and use Wireshark to analyze the packets.
