Packt+ | Advance your knowledge in tech

You're reading from Network Analysis using Wireshark Cookbook This book will be a massive ally in troubleshooting your network using Wireshark, the world's most popular analyzer. Over 100 practical recipes provide a focus on real-life situations, helping you resolve your own individual issues.

Product type Paperback

Published in Dec 2013

Publisher Packt

ISBN-13 9781849517645

Length 452 pages

Edition 1st Edition

Tools

Wireshark

Concepts

Network Security

Author (1):

Yoram Orzach

Preface

1. Introducing Wireshark FREE CHAPTER

2. Using Capture Filters

3. Using Display Filters

4. Using Basic Statistics Tools

5. Using Advanced Statistics Tools

6. Using the Expert Infos Window

7. Ethernet, LAN Switching, and Wireless LAN

8. ARP and IP Analysis

9. UDP/TCP Analysis

10. HTTP and DNS

11. Analyzing Enterprise Applications' Behavior

12. SIP, Multimedia, and IP Telephony

13. Troubleshooting Bandwidth and Delay Problems

14. Understanding Network Security

A. Links, Tools, and Reading

Index

In this recipe we will learn how to get statistics on endpoints information of the captured data.

Start Wireshark, click on Statistics.

To view the endpoint statistics, follow these steps:

From the statistics menu, click on Endpoints.
The following window will come up:
In this window, you will be able to see layers 2 and 3 and 4 endpoints, which are Ethernet, IP, and TCP or UDP.

It simply gives statistics on all the endpoints that Wireshark has discovered. It could be any of the situations here:

Few Ethernet endpoints (these are MAC addresses) with many IP end nodes (these are IP addresses): This will be the case where, for example, we have a router that sends/receives packets from many remote devices, and what we will see is the MAC address of the router and many IP addresses coming/going through it.
Few IP end nodes with many TCP end nodes: this will be the case for many TCP connections per host. It can...