is there any way to get the top talker by protocol

I want to know the top talker with ip_fragmented

I found the most atttack are comming with ip_frag = 1

so with this way we can identified easily