Ethereal-users: Re: [Ethereal-users] Top talkers ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Jerry Talkington <jtalkington@xxxxxxxxxxxxxxxxxxxxx>
Date: Thu, 1 Jul 2004 14:52:23 -0700
On Thu, Jul 01, 2004 at 02:49:33PM -0400, Brian Roberson wrote:
> Jerry,
> 
> Is it possible to just capture top talkers, and not capture any data?

Nope, see Guy's email.

> The
> re-procussions of setting captured bytes down below 68 bytes?
> Would that
> chop the necessary information off?

You can't.  68 seems to be the minimum.  For your purposes, you only
need 34 bytes (14 ethernet + 20 IP).

You could probably run tcpdump on the command line, and filter the
output through some shell script (assuming you are on *nix.)

-- 
GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762