[bart sikkes <b.sikkes@xxxxxxxxx>]

Hello Andreas,

You preferred before / during capture but were open to after capture if I read correctly.

For the after have you looked at the Statistics > Conversations option?

With kind regards,

bart

On Thu, Mar 9, 2023 at 4:01 PM chuck c <bubbasnmp@xxxxxxxxx> wrote:

Have you looked at Netflow/IPFIX?

https://en.wikipedia.org/wiki/NetFlow#NetFlow_and_IPFIX

On Thu, Mar 9, 2023 at 3:12 AM Andreas Moroder <andreas.moroder@xxxxxxx> wrote:

Hello Chuck,

yes I need a deduplication but not on the packets content but only on src/dst/proto/port

to get a list of who talks to who using what port/protocol

Greetings

andreas

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe