Does anyone knows a graphical tool to analyse wireshark captures?
Like something that can agregate traffic by ip's and by protocol and show's it graphicly.
Anyone knows a freeware/opensource utility?
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
Have you tried Wireshark's own "statistics" tools. You have some pretty nice tools to do endpoint conversation analysis (somehow similar to netflow), IO graphs, per protocol statistics, protocols hierarchies, flow graphs, packet length distributions plus several others. Also, many of these tools accepts Wireshark's filter syntaxis so the drill down you can make and the information you can extract from a pcap file is quite deep.
I just recently purchased Cascade Pilot, which is kind of spendy.
If you have access to the network device(s), you can do what you're asking with NetFlow if they support it. This may be a better fit (and lower overhead) than using Wireshark, depending on your needs and architecture. It's not the answer to your question, but it might be something you didn't know to ask for.
Some interesting PCAP graphing into a Circos format can be done with IPLink, available for free at http://ip-link.wikidot.com. You'll need to install a Python interpreter and Perl.
A very manual method using tcptrace and xplot is outlined on the following blog, which may be more along the lines of what you're looking for: http://geek00l.blogspot.com/2005/11/visualize-network-traffic.html