Network Analysis using Wireshark

MN504
Network Application
Management
Network Analysis using
Wireshark
1

Contents
About Task.............................................................................................................................................3
Introduction...........................................................................................................................................3
General Statistics...................................................................................................................................3
- http://www.news.com.au.........................................................................................................4
- http://iview.abc.net.au..............................................................................................................4
Network Performance...........................................................................................................................4
Throughput........................................................................................................................................5
Round Trip Time................................................................................................................................6
Load Distribution...............................................................................................................................6
Warnings and errors..........................................................................................................................7
TCP retransmissions..........................................................................................................................8
Comparison 1........................................................................................................................................9
Comparison 2......................................................................................................................................11
Conclusion...........................................................................................................................................12
Reference............................................................................................................................................12
2

About Task
The task is to analyze the network traffic using the Wireshark tool for some website. Now the
website allocation has to be done according to the last number of the MIT ID. So the name and the
MIT ID is given below.
Name: SEERAT
MIT ID: MIT173290
The set of the website according to the ID is given below.
- http://www.news.com.au
- http://iview.abc.net.au
Introduction
Network communication is the key part of the today’s world. And industry and people are
dependent on it because everything runs on it from a computer application to complex production
environment of the various industries. This is the task which is performed in this report to capture
and analyze the network traffic using the network sniffing tools. The sniffing tools available both in
hardware and software format in the world. For this task, Wireshark tool is used as it is free and
open sources and easily available on the internet.
This report is prepared in order to analyze the network traffic using the sniffing technology. This
sniffing tools provide the network administrator to analyze and solve the issues with production
network by deep traffic analysis. This report is divided into various parts and covers following task.
- General statistics of the packet capture of both the websites.
- Screenshots of the different statistics from the Wireshark tool on various criteria.
- Comparison of the statics and graphs from both the traffic capture.
- Traffic Packet Comparison with another tool e.g. Microsoft Message Analyzer.
General Statistics
So the packet capture needs to be done on the two websites both of them shows the news content
one shows normal newspaper and the other one is the streaming website. The home network is a
very small network and there are very few devices connected. So the ISP uses the modem and
generally uses the class IP address spaces. In this case, the class network is 192.168.1.0/24.
- Modem Address – 192.168.1.1
3

- Machine Address – 192.168.1.4
Now the packet capture is done one by one for both the websites and the statistics are discussed
below one by one.
- http://www.news.com.au
The packet capture was successful and all the IP packets are captured during the browsing
session of the user. So the given below are the statistics of the website packet capture.
o The total time taken to capture all the packet is 201 seconds.
o Total number of the packet captured during the session are 17790.
o The IP address of the client and server given below.
 Client – 192.168.1.4
 Server – 23.23.147.107
- http://iview.abc.net.au
Now for this website is heavy site because of the content on the site. So it takes a lot of time
according to the connection speed with the ISP. The packet capture is successful for this site
also and some of the statistics are given below.
o The total time for the packet capture is 394 seconds.
o The total number of the packet are 22249 captured during the session.
o The IP addresses of the server and the client are given below.
 Client – 192.168.1.4
 23.23.147.104
The packet capture was done using the workstation computer machine. Which has enough
resources to do the task done for this website. The difference between the number of packets in
both the session is different it is because the second website has large multimedia content than the
previous one.
Network Performance
Performance is the main criteria when it comes to network traffic analysis. So the packet capture
clearly shows that the network and website are performing up to the mark. So the performance of
both the packet capture must be done according to certain criteria. Some of the main criteria are
given below and the analysis is done accordingly.
- Throughput
- Round Trip Time
4