Using the Conversations tool from the Statistics menu

In this recipe, we will learn how to get information about conversations that runs over the network.

Getting ready

Start Wireshark, click on Statistics.

How to do it...

To use the Conversations feature from the Statistics menu, follow the ensuing steps:

1. From the statistics menu, choose Conversations.

   

2. The following window will come up:

   

3. You can choose between layer 2 Ethernet statistics, layer 3 IP statistics, or layer 4 TCP or UDP statistics.

4. You can use these statistics tools:

   • On layer 2 (Ethernet): To find and isolate broadcast storms or

   • On layer 3 or 4 (TCP/IP): To connect in parallel with the Internet router port and check who is loading the line to the ISP

     Tip

     If you see that there is a lot of traffic going out to port 80 (HTTP) on a specific IP address on the Internet, you just have to copy the address to your browser and see access to which website is most "popular" with your users.

     If you don't get anything, simply go to a standard DNS resolution...