Wireshark - On a LAN how many packets are ideal for hitting a single computer?

Posted on 2009-12-28
Last Modified: 2012-05-08
On a switched network what is the ideal amount of traffic i should be seeing when i turn on wireshark? I do not have SPAN on or anything. I seem to be getting alot of packets. I am new to the network side so i don't know what is the ideal amount i should be getting vs. i am getting way to much? Any guide lines?
Question by:illforget
    LVL 11

    Expert Comment

    This question really cannot be answered without knowing more about your enviroment, what types of applications are you running, how many servers are in the enviroment, what type of servers are they etc.  

    Unless your network is running extremely sluggish I would not worry about the number of packets/traffic you are seeing.  As long as the network appears to be running normally I would not worry about this at all.
    LVL 17

    Accepted Solution

    If your not spanning a port wireshark then you should only see broadcasts or unknown unicasts which the switch is flooding because it hasn't learned where the destination device is yet. Do you see many packets which are not destined for your devices i.e. conversations between other devices?

    Author Comment

    Out network is a beast. We have some servers we don't want to even unplug because we don't know whats going on! Alright well thats good advise i just wanted to make sure i was not getting more then i should. Because of all the talk about having to SPAN your switch port i thought i was getting more then what i should.

    Author Comment

    Yes, i seem to see conversations between other devices. I am not the source or the destination.
    LVL 17

    Expert Comment

    Are they on the same or different subnets?

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    I have seen some questions on problems with SSH/telnet access to Cisco routers that may occur despite the fact that from a PC connected to your LAN, Internet connectivity is in place and users can access Internet sites without any issues.  There are…
    This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now