Ethereal-users: Re: [Ethereal-users] Ethereal Top Talkers

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 8 Jan 2003 11:36:21 -0800
On Wed, Jan 08, 2003 at 08:18:35AM -0500, Daniel Rathman wrote:
> Is there a feature in Ethereal that allows you to view the top talkers
> on a network?

Nobody's written such a feature for Ethereal.

However, as Ethereal uses libpcap format for its capture files, you
might be able to...

> For example, is there a way I can take captured packets
> and see what flow pulled the most bytes during the capture period.

...use ntop to do that:

	http://www.ntop.org/ntop.html

as ntop can, I think, read capture files and report on various network
statistics.  There might be other tools that can do that as well.