Re: [Ethereal-users] Top talkers ?

[Jerry Talkington <jtalkington@xxxxxxxxxxxxxxxxxxxxx>]

On Thu, Jul 01, 2004 at 11:44:03AM -0400, Brian Roberson wrote:
> When sniffing on our corporate network we usually don't care to decode or
> even look at the packet data.  We usually only care to see the DNS names of
> the top talkers.
>  
> Is there a way in Ethereal to get this functionality without the overhead of
> the packet capture?  If we do a 5 minute packet capture, it can take 30
> minutes to be able to finally get to endpoints or conversations.

When capturing, there's an option to limit each capture to 68 bytes.
Turn that on, and you'll only get the info that you need, without the
payloads.

-- 
GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762