Packet Analyser and Network Performance: A Comparative Study using Wireshark and Network Monitor

Table of Contents
1. Introduction.................................................................................................................................2
2. General Statistics.........................................................................................................................2
3. Network Performance.................................................................................................................3
4. Comparision-1..............................................................................................................................6
5. Comparision-2..............................................................................................................................8
6. Conclusion..................................................................................................................................11
7. References..................................................................................................................................12
1

1. Introduction
The data packets are captured by the pocket sniffers [1]. In the final destination the pocket sniffers
are not shown. The unusual behaviors are easily is identified by using pocket sniffers. Mostly the
unusual behaviors are present in the network. The pocket sniffers are mostly used identified the
bottle necks of the network. Using wire shark we can record the data packets. For example the web
site will be browsed in 10 minutes continuously, and then using wire shark for identifies the data
packets of the web site. The pocket key features are based on the analyses. The data capture is
successfully completed then we need to check the total no of available packets, and IP address of
client and also the server. Types of network parameters are used such as TCP transmission,
throughput, etc. The pocket sniffers are participated in ease of access, ease of use, properties of
statistics operations, GUI facilities, and traffic virtualization.
In today's environment, company intranets are growing fastly.so that network administrators should
know different technologies related to networks. Traffic monitoring and analysis plays an significant
role in network.because these technologies used to ensure effctive troubleshoot and correct
behavior of the network activities without any traffic issues. From the network administrator's
perspective,Network monitoring is difficult task that should be handle with care.network
administrators put more effort to ensure smooth operation of networks continiously,they need to
monitor traffic movement in great extent.small problem in networks will leads to serious problem.
For example,public service departments provide services to customers.if any problem occured in
that department,then its ability to provide necessary services to customers should be affected and
also its productivity goes down. So its administrators responsibility to ensure proper behavior of the
network.if any problem occur in network,they have to ensure the causes of the problem do not
propagate into networks.
2

2. Packet Analyser
Packet analyser is an analysing tool used to analyse the content of the packets in the network.its
look like computer program.packet analyser otherwise called packet sniffer,ethernet sniffer,wireless
sniffer.several data packets are transferred over the network.the sniffer captures every packet and
analyse its content,and also showing values of various fields that should be used in that packet. Here
are some examples showing why these packet analysers are used for:
For identifying troubleshoot network problems, network administrators prefer this packet analyser.
Network security engineers also using this analyser to identify security problems.
It also used in debug protocol implementation. For learning network protocol internal, people also
prefering this analyser.
Two network packet analyser softwares used here:
1. Wireshark
Wireshark[2] is well known packet analyser.it is also open source.
2.Network Monitor
Features of wireshark
 Available for unix and windows operating systems.
 It is used in capturing data packets in network interface.
 It uses several capturing programs like windump to capture data in open files.
 Used to import packets from text files.the text files may contain hex dumps of packet data.
 It displays packets with protocal information in detail.
 Captured data is saved.
 It uses several file formats to export all packets.
 Used to filtering packets based on some criteria.
 Searching required packets based on given criteria.
 Colorize packet display based on filters.
3. General Statistics
Time of Capture
3

http://www.news.com.au
07:10:31- 01/06/2018
Total Number of Captured Pockets
http://www.news.com.au :3055
IP Address of Client and Server
Client: 100.102.127.39
Server: 172.217.163.67
4. Network Performance
4