Re: [Wireshark-users] Filte only one record for src/dst/proto combination

2023-03-11 Thread bart sikkes
Hello Andreas, You preferred before / during capture but were open to after capture if I read correctly. For the after have you looked at the Statistics > Conversations option? With kind regards, bart On Thu, Mar 9, 2023 at 4:01 PM chuck c wrote: > Have you looked at Netflow/IPFIX? > http://

Re: [Wireshark-users] Filte only one record for src/dst/proto combination

2023-03-09 Thread chuck c
Have you looked at Netflow/IPFIX? http://en.wikipedia.org/wiki/NetFlow#NetFlow_and_IPFIX On Thu, Mar 9, 2023 at 3:12 AM Andreas Moroder wrote: > Hello Chuck, > > yes I need a deduplication but not on the packets content but only on > src/dst/proto/port > to get a list of who talks to who using

Re: [Wireshark-users] Filte only one record for src/dst/proto combination

2023-03-09 Thread Andreas Moroder
Hello Chuck, yes I need a deduplication but not on the packets content but only on src/dst/proto/port to get a list of who talks to who using what port/protocol Greetings andreas___ Sent via:Wireshark-users mailing list

Re: [Wireshark-users] Filte only one record for src/dst/proto combination

2023-03-08 Thread chuck c
You're looking to dedup on capture or get a duplicate packet count in the gui? On Wed, Mar 8, 2023 at 8:36 AM Andreas Moroder wrote: > Hello, > > is it possible to create a capture filter that does not capture packets if > they have the same src ip , dst ip, port and protocol as the the antecede

[Wireshark-users] Filte only one record for src/dst/proto combination

2023-03-08 Thread Andreas Moroder
Hello, is it possible to create a capture filter that does not capture packets if they have the same src ip , dst ip, port and protocol as the the antecedent packet? If not, is it possible to create a display filter that shows this combinations with the count of packets? Greetings Andreas ⁣Bl