[j.snelders@xxxxxxxxxx]

Hi Shannon,

Or you can take a look at Statistics -> Conversations or Statistics -> Endpoints.
You can sort by clicking on the column headers, for instance Packets, Bytes.
You can also apply display filters by right-clicking on a conversation.
See the User's Guide for more information:
http://www.wireshark.org/docs/wsug_html_chunked/ChStatConversations.html
http://www.wireshark.org/docs/wsug_html_chunked/ChStatEndpoints.html#ChStatEndpointsWindow

Regards
Joan

On Thu, 12 Mar 2009 10:10:51 -0700 (PDT) Wes wrote:
>
>The easiest way is to put:
>
>ip.addr == xx.xx.xx.xx
>
>into the display filter where xx.xx.xx.xx is the IP address of interest.
>
>Wes
>
>
>--- On Thu, 3/12/09, Shannon Adams <shannon_adams68@xxxxxxxxx> wrote:
>
>> From: Shannon Adams <shannon_adams68@xxxxxxxxx>
>> Subject: [Wireshark-users] Packet capture on one IP address?
>> To: wireshark-users@xxxxxxxxxxxxx
>> Date: Thursday, March 12, 2009, 12:19 PM
>> Thanks to all who helped me with the question below.  If I
>> see one IP address is a "top talker", how do I
>> zone in on that one IP and see what they are doing?  I have
>> tried creating filters by IP and haven't had much luck. 
>> Thanks for any help.
>> 
>> 
>> 
>> ----- Original Message ----
>> From: Shannon Adams <shannon_adams68@xxxxxxxxx>
>> To: wireshark-users@xxxxxxxxxxxxx
>> Sent: Thursday, March 12, 2009 9:09:01 AM
>> Subject: "Top Talkers" using Wireshark?
>> 
>> I have been reviewing the Network Instruments Observer
>> product and the most useful feature for me is the "Top
>> Talkers" screen.  I can start a packet capture and sort
>> by total bytes or packets.  
>> 
>> I just discovered and installed Wireshark this morning, but
>> I cannot seem to locate a "Top Talkers" type tool.
>>  If I it has that, it would save me a small fortune in
>> having to purchase a license for Network Observer.  Does
>> Wireshark have this feature?  If so, can someone please lead
>> me in the right direction on how to use it?
>> 
>> Thanks in advance,
>> Shannon
>> 
>> 
>>       
>> ___________________________________________________________________________
>> Sent via:    Wireshark-users mailing list
>> <wireshark-users@xxxxxxxxxxxxx>
>> Archives:    http://www.wireshark.org/lists/wireshark-users
>> Unsubscribe:
>> https://wireshark.org/mailman/options/wireshark-users
>>             
>> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
>
>      
>___________________________________________________________________________
>Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
>Archives:    http://www.wireshark.org/lists/wireshark-users
>Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe