Recommended Posts

Sure if you just want to see what is sending traffic then the free netlimiter is all you need. But its not going to show you want its sending -- just from what process and to where and how much.. Not what. For that you need a sniffer.. So in conjunction they can be used together sure.

BTW -- if there is clutter, just filter out what you don't want.. Its quite easy to just capture say port 80 traffic, or just ftp traffic Or only traffic to and from a specific IP.

Daft question but can you apply a filter in Ethereal by process?

In Wireshark, you mean? We all know Ethereal no longer exists so stop harping on about the name like it means you know something or not...

In answer to your question, no you cannot, not by process... The best method here would be to find the suspected TCP/UDP port you believe it is using (netstat -b -a -n for example...) followed by a capture in Wireshark based on your IP address (if it's a remote capture) then base the filter on the TCP/UDP port.

This would be the best way you could do it - the other "chatter" you probably see is the normal traffic going to/from computers/internet etc and best way is the filters in wireshark.

Good luck!

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.