Hello Andreas,
You preferred before / during capture but were open to after capture if I
read correctly.
For the after have you looked at the Statistics > Conversations option?
With kind regards,
bart
On Thu, Mar 9, 2023 at 4:01 PM chuck c wrote:
> Have you looked at Netflow/IPFIX?
> http://
Have you looked at Netflow/IPFIX?
http://en.wikipedia.org/wiki/NetFlow#NetFlow_and_IPFIX
On Thu, Mar 9, 2023 at 3:12 AM Andreas Moroder
wrote:
> Hello Chuck,
>
> yes I need a deduplication but not on the packets content but only on
> src/dst/proto/port
> to get a list of who talks to who using
Hello Chuck,
yes I need a deduplication but not on the packets content but only on
src/dst/proto/port
to get a list of who talks to who using what port/protocol
Greetings
andreas___
Sent via:Wireshark-users mailing list
You're looking to dedup on capture or get a duplicate packet count in the
gui?
On Wed, Mar 8, 2023 at 8:36 AM Andreas Moroder
wrote:
> Hello,
>
> is it possible to create a capture filter that does not capture packets if
> they have the same src ip , dst ip, port and protocol as the the antecede
Hello,
is it possible to create a capture filter that does not capture packets if they
have the same src ip , dst ip, port and protocol as the the antecedent packet?
If not, is it possible to create a display filter that shows this combinations
with the count of packets?
Greetings
Andreas
Bl