Home page logo
/

wireshark logo Wireshark mailing list archives

Re: Need to record bandwidth used by branch office VPN tunnels
From: Sake Blok <sake () euronet nl>
Date: Fri, 9 Aug 2013 17:16:00 +0200

On 9 aug 2013, at 03:05, Laura Chappell wrote:

Consider using tshark (command-line tool) with the following parameters perhaps…
 
tshark –q –z io,stat,3000,ip.addr==192.168.1.0/24,ip.addr==192.168.2.0/24,ip.addr==192.168.3.0/24 > mystats.txt
 
No packets are saved during this process – you’re only getting statistics.

Laura, this is not entirely true. As tshark uses dumpcap to capture the traffic, dumpcap will save all the packets in a 
temporary file from which tshark will read. To monitor the traffic for  a week in this manner will most likely result 
in a) an out-of-memory error due to the fact that tshark keeps information about each conversation and b) a disk 
filling up with packet data.

Cheers,
Sake


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]