Wednesday, February 27, 2013

Calculating Throughput Using Wireshark

Took me a while to figure it out. Wasn't too hard actually.

Easiest way to calculate throughput using Wireshark is to use the Statistics -- Conversations option. A pop-up window shows all of the "conversations" within the trace, either Ethernet, IP, TCP, UDP, etc., and the bytes, packets, and bps between the two endpoints. To lessen the clutter, you can actually right-click on a session you're interested in, then do "Follow TCP Stream" or "Conversation Filter". You then do a Statistics -- Summary to get basic info like number of packets or bytes, packets/sec, bytes/sec, and MBit/sec, etc. Yet another way is to use Statistics -- Protocol Hierarchy. If you prefer graphs, you can go to Statistics -- IO Graphs. Remember to use bytes/tick to give you a better reading.

To get the round-trip time, use Statistics -- TCP Stream Graph -- Round Trip Time Graph.
To get number of packets dropped, do a Conversation Filter, then add "and tcp.analysis.lost_segment" to the filter. It should then show you how many packets were lost.

No comments:

Post a Comment