0

I have an open WiFi network in my business and it's recently slowed to a crawl. I'd like to find out which IP is using my bandwidth so I can block their MAC address.

My router doesn't support any sort of reporting, so I'd have to do this from a connected Windows machine. What I'd really like is to be able to leave a program like Wireshark to record for a few hours, then be able to see a graph of which IP used how much bandwidth.

How can I achieve this?

Improve this question

1 Answer 1

Reset to default
1

If it is open wifi, you should be able to sniff the traffic with any machine that has a wireless card and a sniffer installed (such as wireshark). Choose the wireless interface in wireshark and watch the packets come in.

Improve this answer
3
  • I think I am able to sniff the traffic with Wireshark. The question is - once I've sniffed the traffic, and I have the packet logs from e.g. an entire day, how do I use Wireshark to show me which IP (or better yet, MAC address) is using my bandwidth?
    – configurator
    Commented Nov 15, 2013 at 21:52
  • 1
    You can sort captured packets by IP address. At that point you could see the total amount of data transferred by that address.
    – Alex
    Commented Dec 18, 2013 at 20:28
  • Thanks, I'll try that if and when the bandwidth-stealing guy ever returns. He just stopped a couple of days later, so I didn't have to ban anyone.
    – configurator
    Commented Dec 21, 2013 at 16:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .