Using Wireshark, is there any possibility to check which IP address is using more bandwidth in my network? asked 02 Apr '12, 08:13  arasu edited 02 Apr '12, 11:00  multipleinte... |
2 Answers:
Try looking at Statistics -> Endpoints, then choose the IPv4 (or IPv6) tab. You can sort by any of the columns. In your case, sorting by the Bytes column might help you find the top "talkers" more easily. You can also copy the data and paste it into a .csv file for further analysis if you need to. answered 02 Apr '12, 10:46  cmaynard ♦♦ |
As @cmaynard has mentioned Wiresharks Endpoints display can help, as long as you are capturing everything in your network. If you're not capturing on your egress router and you have a switched network you probably won't be seeing all the traffic. Read the Capture Setup page on the wiki for more help on this. answered 02 Apr '12, 14:07  grahamb ♦ |
