Re: [Ethereal-users] Top talkers ?

[Jerry Talkington <jtalkington@xxxxxxxxxxxxxxxxxxxxx>]

On Thu, Jul 01, 2004 at 02:49:33PM -0400, Brian Roberson wrote:
> Jerry,
> 
> Is it possible to just capture top talkers, and not capture any data?

Nope, see Guy's email.

> The
> re-procussions of setting captured bytes down below 68 bytes?
> Would that
> chop the necessary information off?

You can't.  68 seems to be the minimum.  For your purposes, you only
need 34 bytes (14 ethernet + 20 IP).

You could probably run tcpdump on the command line, and filter the
output through some shell script (assuming you are on *nix.)

-- 
GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762