Network Application Management: Analyzing Three Different Networks Using Wireshark Tool

This project aims to develop an analytical understanding of management and performance of different types of networked applications. It is used to produce an opportunity to understand the network management and performance issues of networked application using the wire shark tool. This project is successfully analysis the three different networks by using the wire shark tool. It is also successfully analysis the network packets to provided the effective analysis for network application management.

NETWORK APPLICATION MANAGEMENT

Table of Contents
1 Introduction..............................................................................................................................3
2 Task – 1....................................................................................................................................3
2.1 Network - 1.......................................................................................................................3
2.1.1 Capture Time.............................................................................................................3
2.1.2 Total number of Captured Packets............................................................................4
2.1.3 Client and Server IP address......................................................................................5
2.2 Network - 2.......................................................................................................................5
2.2.1 Capture time...............................................................................................................5
2.2.2 Total number of Captured Packets............................................................................5
2.2.3 Client and Server IP address......................................................................................6
2.3 Network – 3.......................................................................................................................7
2.3.1 Capture time...............................................................................................................7
2.3.2 Total number of Captured Packets............................................................................7
2.3.3 Client and Server IP address......................................................................................8
3 Task - 2....................................................................................................................................8
3.1 Network – 1.......................................................................................................................9
3.1.1 Throughput................................................................................................................9
3.1.2 Round Trip time.......................................................................................................10
3.1.3 TCP retransmissions................................................................................................11
3.2 Network - 2.....................................................................................................................12
3.2.1 Throughput..............................................................................................................12
3.2.2 Round Trip time.......................................................................................................13
3.2.3 TCP retransmissions................................................................................................14
3.3 Network - 3.....................................................................................................................15
3.3.1 Throughput..............................................................................................................15
3.3.2 Round Trip time.......................................................................................................16
3.3.3 TCP retransmissions................................................................................................17
4 Task - 3..................................................................................................................................17
5 Task - 4..................................................................................................................................19
6 Conclusion.............................................................................................................................22
References......................................................................................................................................22
2

1 Introduction
This project aims to develop an analytical understanding of management and performance
of different types of networked applications. This project is used to provide an opportunity to
understand the network management and performance issues of networked application using the
wire shark tool. Here, we will analysis the three different networks by using the wire shark tool.
The wire shark tool is most popular tool to analysis and monitoring the network. This tool is used
to resolve the network trouble shooting problem. This project is to analysis the network packets
to provide the effective analysis for network application management. The network packets are
captured by using the two websites. The wire shark tool is captures the packets from that website
and it is needs to be analysis to provide the network performance and traffic. This analysis is also
used to compare the three different networks to provide the effective network information. It also
monitors the network traffic. This project also analysis the another network monitoring tool like
Microsoft message analyzer and it features.
2 Task – 1
Here, we will use the three different networks to capture the packets and it provide the
information about the captured packets like capture time, total number of packets and client and
server IP address. It is discussed in below [1].
2.1 Network - 1
2.1.1 Capture Time
The below screenshot is used to display the time taken for the packet capturing. The total
time takes for the packet capturing is 49 seconds.
3

2.1.2 Total number of Captured Packets
The total number of captured packets is 15479. The average number of packets received
per second is 309.714 and the average size of the packets is 530.700 bytes.
4

2.1.3 Client and Server IP address
Client IP address is 192.168.1.15 and Server IP address is 54.230.190.92.
2.2 Network - 2
2.2.1 Capture time
The below screenshot is used to display the time taken for the packet capturing. The total
time takes for the packet capturing is 1 minute 38 seconds [2].
2.2.2 Total number of Captured Packets
The total number of captured packets is 9655. The average number of packets received
per second is 97.583 and the average size of the packets is 431.848 bytes.
5

2.2.3 Client and Server IP address
Client IP address is 192.168.225.246 and Server IP address is 138.108.140.100.
6

2.3 Network – 3
2.3.1 Capture time
The below screenshot is used to display the time taken for the packet capturing. The total
time takes for the packet capturing is 1 minute 10 seconds [3].
2.3.2 Total number of Captured Packets
The total number of captured packets is 9505. The average number of packets received
per second is 133.939 and the average size of the packets is 452.110 bytes.
7

2.3.3 Client and Server IP address
Client IP address is 192.168.43.143 and Server IP address is 103.55.113.106.
3 Task - 2
Here, we will determine the throughput, round trip time and TCP retransmission for three
different networks. It is used to provide the effective network information. The wire shark is
used to monitor the network traffic on three different networks [4].
8

3.1 Network – 1
3.1.1 Throughput
The throughput is an amount of data transferred in a network from one location to
another location within in a particular time period. The throughput is used to determine the
network performance. The throughput is based on the network latency and packet loss. It is
measured in data packet per second and bits per seconds. It also used to determine the network
quality. It is used for network device communication through the data packets. If packers are
dropped, the throughput will be lower and it reduces the network quality and performance. The
successful packet has high throughput to provide the high network quality and performance. In
first network, the throughput is shown below. It has medium throughput.
9

3.1.2 Round Trip time
The round trip time also known as round trip delay time. The round trip time is the time
is required for packet travel from source to destination. It is addressed by the ping address and it
determined by the internet protocol. It is used to measures the duration between the browser
request and response received from the server. To measure the round trip time by use the ping
command. It will be higher due to network server throttling and congestion. It is influenced by
various factors like response time, number of hops, transmission medium and distance of the
server. It also influenced by the traffic level. The Round trip time of the captured packets is
shown below.
10

3.1.3 TCP retransmissions
The TCP retransmission is used to indicate the troubles in the data transmission.
Basically, the data transfer is based on TCP [5]. When the data is received by the receiver, it will
send acknowledgement for the received packets. If the packet is lost, it will be retransmitted by
the sender. The wire shark is easily detects the TCP retransmission by filter the packets to
analysis the TCP packets. Then, it provides the TCP retransmission packets. It ensures the data
reliability from source to destination. . If the TCP connection detects the retransmission, it will
logically assume that packet loss has been occurred in the network. But most of the analyzers
indicate the duplicate acknowledgement and it can be detected when two packets have same
acknowledgement number. The retransmitted packets are indicated in black color. The TCP
retransmission is shown below.
11

3.2 Network - 2
3.2.1 Throughput
The below screenshots is used to display the second network throughput. When
comparing the first network, the second network has high throughput [6].
12

3.2.2 Round Trip time
The below screenshots is used to display the second network Round trip time. When
comparing the first network, the second network has high Round trip time.
13

3.2.3 TCP retransmissions
The below screenshots is used to shows the TCP retransmission and it analyzed in wire
shark tool. The re transmitted packets are highlighted in black color.
14

3.3 Network - 3
3.3.1 Throughput
The below screenshots is used to display the third network throughput. When comparing
the first network and second network, it has medium throughput.
15

3.3.2 Round Trip time
The below screenshots is used to display the second network Round trip time. When
comparing the first network and second network, it has Low Round trip time.
16

3.3.3 TCP retransmissions
The below screenshots is used to shows the TCP retransmission and it analyzed in wire
shark tool. The re transmitted packets are highlighted in black color [7].
4 Task - 3
Here, we will compare the three different networks through put and round trip time. The
determination of round trip and throughput is used to provide the effective network information.
These are determined by using the wire shark and it used to monitor the network traffic on the
three different networks. If packers are dropped, the throughput will be lower and it reduces the
network quality and performance. The successful packet has high throughput to provide the high
network quality and performance. The round trip time is the time is required for packet travel
from source to destination. It is addressed by the ping address and it determined by the internet
17

protocol. It is used to measures the duration between the browser request and response received
from the server.
The first network has low through put, second network has high network compared to first
and third network. The third network has medium network compared to first network. So, the
second network has high throughput. This network also has high round trip time compared to
first and third network. The high throughput network is shown below.
18

The Effective round trip time is shown below.
So, the second network provides the effective network information and it easily monitoring
the network traffic on the network [8].
5 Task - 4
Comparison between Wire shark and Microsoft Message Analyzer
Access and Use
The wire shark source code can be downloaded from the official website. The wire shark
needs the at least 400 MHz procession, minimum 128 MB RAM and promiscuous mode
supported NIC. It also requires the minimum 75 MB free space in hard disk and win pcap
software. Then, download the tar file and install the wire shark. But, the Microsoft message
analyzer is difficult to install because it download the file. Then create the new directory based
19

on installation distribution and configure the command to configure the Microsoft Message
analyzer. To complete the final installation process by use the install command. So, the Wire
shark installation access and use is easy compare to Microsoft message analyzer.
GUI
The Graphical user interface for wire shark is creates the easy access to user friendly. But,
the Microsoft message analyzer is different from the wire shark. Then, analysis the overall
process of Microsoft message analyzer and wire shark, both are monitor the network traffic. But,
the default view of Microsoft message analyzer is different while comparing with wire shark.
The default message is shown in the top of Microsoft layer. The network display flat message
only. This flat message is not reassemble and no simulation. But wire shark is reassembling the
various code and simulation. GUI for Microsoft message analyzer is shown below.
Traffic Visualization
Generally, the wire shark is consists of various section. These sections have the user
friendly interfaces. The selection of packet is done by packet list pane; the packet information is
obtained from the packet detail pane. These are used to provide the information the network
protocols. The protocol fields are selected from the packet. The wire shark user cans simply
capturing packets from the start window. The window capture option is shows all the available
interfaces in the network. But, the Microsoft message analyzer does not have different pane. It
20

has various sections and it difficult to understand the packet information and protocol
information. The traffic visualization is shown below,
Generation of Statistics
In statistics generation, the Microsoft message analyzer is used to gives the ability of future
to create the documentation and testing the documentation. But, the wire shark has the noise is
does not hide. It defines the one of the technical analyzer and it has variety of the tools available
to penetrate and vulnerabilities the secure. It is used to decrease the network attacks, detect the
network issues and trouble shoots the network. But, the wire shark is constantly check and
investigates the network plan and both are succeed in a network attack.
Compared to wire shark and Microsoft message analyzer, the wire shark has main
advantages compared to Microsoft message analyzer. The wire shark is easy to design and built
the source but, the Microsoft message analyzer is difficult to build the source. It hiding the top of
the layer so, network noise are hide. So, the wire shark is most effective tool to analyze and
monitor the network.
21

6 Conclusion
This project aims to develop an analytical understanding of management and performance
of different types of networked applications. It is used to produce an opportunity to understand
the network management and performance issues of networked application using the wire shark
tool. This project is successfully analysis the three different networks by using the wire shark
tool. It is also successfully analysis the network packets to provided the effective analysis for
network application management. The network packets are captured by using the two websites.
It is used to compare the three different networks to provide the effective network information.
These are discussed and analyses in detail.
References
[1]A. Singh, Instant Wireshark starter. Birmingham: Packt Pub. Ltd., 2013.
[2]R. Shimonski, The wireshark field guide. Amsterdam: Syngress, 2013.
[3]Anish Nath., Packet Analysis with Wireshark. Packt Publishing, 2015.
[4]Y. Orzach, Network Analysis using Wireshark Cookbook. Birmingham: Packt Publishing,
2013.
[5]B. Claise and R. Wolter, Network management. Indianapolis, IN: Cisco Press, 2013.
[6]A. Singh, Instant Wireshark starter. Birmingham: Packt Pub. Ltd., 2013.
22

[7]Y. Orzach, Network Analysis using Wireshark Cookbook. Birmingham: Packt Publishing,
2013.
[8]C. Sanders, Practical packet analysis. San Francisco, Calif.: No Starch Press, 2011.
23