Network Analysis using Wireshark

MN504, T3 2017
Networked Application Management
Network Analysis using Wireshark
Student ID: Mit172991
1

Table of Contents
Introduction...........................................................................................................................................3
General Statistics...................................................................................................................................4
http://www.nzherald.co.nz/..............................................................................................................4
http://www.9now.com.au/live/........................................................................................................6
Network Performance...........................................................................................................................8
Throughput........................................................................................................................................8
Round Trip Time (RTT).......................................................................................................................9
Load Distribution.............................................................................................................................10
Warnings and errors........................................................................................................................11
TCP retransmissions........................................................................................................................13
Comparison between given websites..................................................................................................14
Comparison between Wireshark and other relevant tools..................................................................16
Conclusion...........................................................................................................................................17
References...........................................................................................................................................18
2

Introduction
In the recent age of advanced technology and era of globalization, network communication has
become an integral part of competitive business and industries. All the industries rely upon networks
to ensure high-end connectivity all around the world.
All these aspects not only focuses on the deployment of various technologies but also demands
network management and security. Taking all the demands into consideration, Network
administrator’s starts tracking the traffic and analysis all the packets pass onto the network. There
are many tools available in the market these days to provide deep traffic inspection and analysis.
These tools are known as sniffing tools. These tools are highly efficient in troubleshooting and
capturing each packet passed onto the networks.
This report mentions how to analyze the network traffic using Wireshark and other various tools.
The art of solving and analyzing the captured packets are used by an administrator to troubleshoot
the issues by inspecting the traffic deeply with sorted filtering techniques.
The report highlighted the following list of events captured during analysis
1. General statistics of the captured packet for given websites is explained.
2. The general statistics are shown in Screenshots taken from the Wireshark upon mentioned
parameters.
3. The detailed graph analysis and explanation is mentioned.
4. Packet-level description and comparison with mentioned snipping tool i.e. Microsoft Message
Analyzer.
Purpose
The purpose of this report is to analyze the network traffic using the Wireshark tool for the given
websites. The general aim is to develop an analytical understanding of performance and
management of different types of networked applications.
The consequence of the completion of given task will not only provide an opportunity to understand
network performance but also let us know the various management issues of networked
applications using state of the art tools. This exercises also provide an opportunity to demonstrate
analytical ability to evaluate distributed systems performance, Quality of Service and service
management
3

“Wireshark is the world’s foremost and widely-used network protocol analyzer. It lets you see what’s
happening on your network at a microscopic level and is the de facto (and often de jure) standard
across many commercial and non-profit enterprises, government agencies, and educational
institutions”.
General Statistics
We have done the packet capture using Wireshark on both stated website. We have assigned
particular websites for this purpose
- http://www.nzherald.co.nz/
- http://www.9now.com.au/live/
The internal network is a LAN network which is very small since few devices are connected to WI-FI
networks. The client machine is getting an IP address dynamically through the DHCP services
enabled on the access point at home networks. In our study, the network which we are using is
192.168.100.0/24.
Client Address – 192.168.100.5
The statistics which are recorded for both the websites are mentioned below
http://www.nzherald.co.nz/
We have captured all the packets on Wireshark successfully and the recorded stats are
mentioned below:
a. The total time taken to capture all the packet is 85 second.(339-254)
b. Total number of the packet captured during the session are 35,714.(138,552-102,838)
c. Windows 7 is the device at which files were captured.
d. The IP address of the client and server is stated as-
i. Client – 192.168.100.5
ii. Server – 203.99.67.67
4