In this recipe we will learn how to create some IP-based statistics. We will discuss the following statistics tools:
IP Addresses
IP Destinations
IP Protocols Types
Getting ready
Open Wireshark and click on the Statistics menu.
How to do it...
To get IP addresses statistics, perform the following steps:
Navigate to Statistics | IP Addresses.
In the window that comes up, select the filter you want to use by clicking on the Filter button:
If you want to see statistics of the whole captured file, leave it blank and all the IP packet statistics will be shown.
If you want to see only statistics up to a specific IP address, type the filter in the display filter syntax. For example, the filter ip.addr==10.0.0.2 will show you only IP packets sent to or from this address.
After typing in the filter, you will get the following statistics:
To get IP and TCP/UDP destination statistics, perform the following steps:
Navigate to Statistics | IP Destinations.
In the following window, choose the filter you want to use:
This window will show you all those IP addresses to whose destination IPs it has sent packets, and on what protocols.
You will get the following statistics:
In this statistics table, you can see that host 10.0.0.5 has sent TCP packets to port 80, 443, and 5222, and UDP packets to ports 53 and some others.
This is one of the tools that brings up suspected issues; for example, when you see a suspected port with too many packets sent to it, start looking for a reason. To get IP protocol types:
Navigate to Statistics | IP Protocol Types.
In the following window, choose the filter you want to use:
You will get the statistics of the protocols that run over IP that are mostly TCP and UDP.
How it works...
Simply by creating statistics over the captured file.
There's more...
There are various options in Wireshark that give you quite similar statistics; these are Conversations, Protocol Hierarchy, and Endpoint, which were discussed at the beginning of this chapter. You can use them in conjunction with the methods we learned in this recipe.