From charlesreid1

 
Line 17: Line 17:
=Traffic=
=Traffic=


Wireshark IO graphs show the measure of traffic in a given space over time. By changing the time resolution you get very different pictures of the data.
See the [[Wireshark/Traffic Analysis]] page for information about analyzing the amount of traffic on a network with wireshark.
 
Case in point: the rather boring 1-second resolution:
 
[[Image:WiresharkIO_1second.png|500px]]
 
versus the much more interesting 10-minute resolution:
 
[[Image:WiresharkIO_10minute.png|500px]]
 
 
 


{{WiresharkFlag}}
{{WiresharkFlag}}

Latest revision as of 03:09, 20 January 2016

Advanced Stuff

Endpoints and Conversations

See Wireshark/Conversation Analysis page

Protocols

See the Wireshark/Protocol Analysis page for more info on analyzing traffic protocols.

Name Resolution

To convert from a MAC address to an IP address is name resolution using the ARP protocol.

To convert from IP to Human-readable domain name uses DNS protocol.

Traffic

See the Wireshark/Traffic Analysis page for information about analyzing the amount of traffic on a network with wireshark.