Packt+ | Advance your knowledge in tech

You're reading from Network Analysis using Wireshark 2 Cookbook Practical recipes to analyze and secure your network using Wireshark 2

Product type Paperback

Published in Mar 2018

Publisher

ISBN-13 9781786461674

Length 626 pages

Edition 2nd Edition

Tools

Wireshark

Concepts

Network Security

Authors (3):

Nagendra Kumar Nainar

Yoram Orzach

Yogesh Ramdoss

View More author details

Table of Contents (25) Chapters

Title Page

Dedication

Packt Upsell

Contributors

Preface

1. Introduction to Wireshark Version 2 FREE CHAPTER

2. Mastering Wireshark for Network Troubleshooting

3. Using Capture Filters

4. Using Display Filters

5. Using Basic Statistics Tools

6. Using Advanced Statistics Tools

7. Using the Expert System

8. Ethernet and LAN Switching

9. Wireless LAN

10. Network Layer Protocols and Operations

11. Transport Layer Protocol Analysis

12. FTP, HTTP/1, and HTTP/2

13. DNS Protocol Analysis

14. Analyzing Mail Protocols

15. NetBIOS and SMB Protocol Analysis

16. Analyzing Enterprise Applications' Behavior

17. Troubleshooting SIP, Multimedia, and IP Telephony

18. Troubleshooting Bandwidth and Delay Issues

19. Security and Network Forensics

Index

Creating IP-based statistics

In this recipe, we will learn how to create some IP-based statistics. IP statistics are actually several tools based on the same data, that is, source and destination IP addresses, and the packets that are sent between them.

Getting ready

Open Wireshark and click on the Statistics menu. Right at the bottom of the Statistics menu, we see the following statistics tools:

IPv4 Statistics
IPv6 Statistics

The following displays the options under the IPv4/IPv6 statistics sections:

All Addresses
Destinations and Ports
IP Protocols Types
Source and Destinations Addresses:

How to do it...

To get the statistics, follow these steps:

To get all IP addresses:

Go to Statistics| IPv4 Statistics | All Addresses.
Alternatively, go to Statistics| IPv6 Statistics | All Addresses. The following window opens:

So far, it is obvious. The interesting stuff here is that you can configure a filter, for example (in this example), the filter tcp.analysis.retransmission shows us that most of the retransmissions...