Ethereal-users: Re: [Ethereal-users] [Q]traffic per IP?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Thu, 12 Oct 2000 01:54:13 -0700
On Thu, Oct 12, 2000 at 04:15:39PM +0900, À̸¸Èñ wrote:
> Using Ethereal, is it possible to measure all traffic from or to a specific
> IP? for example,
>                                               # of bytes      # of packets  ....
> from any to 111.111.111.111  :     12345            1345          ....
> from 111.111.111.111 to any  :    234569           23456         ....

I guess you could specify a capture filter of

	host 111.111.111.111

and capture a bunch of traffic, and then, after it's captured, use the
"Summary" menu item under the "Tools" menu to get that kind of summary
information.

I don't know offhand whether the "Bytes of traffic" item in the summary
window counts all traffic or just the traffic that passed the display
filter, so I don't know if you could just apply a display filter of

	ip.addr == 111.111.111.111

and get those statistics.  You could, I guess, apply such a display
filter, save the filtered packets to a file, and then read that file.