Solved

wireshark conversation statistics

Posted on 2015-02-07
6
264 Views
Last Modified: 2015-02-07
I got the conversation statistics (see pic). There are 202 IP conversations, 416 tcp conversations, and 1043 udp conversations. I thought that tcp and udp are under IP. That is what showing under Protocol Hierarchy statistics. But looking at the conversations, the sum of conversations of tcp and udp are greater than IP conversations. Am I missing something? Thanks

pic
0
Comment
Question by:leblanc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 2

Accepted Solution

by:
UnHeardOf earned 500 total points
ID: 40595892
if you look at the TCP/UDP tabs you will notice that you may have multiple connections ( conversations ) to the same host.
0
 
LVL 1

Author Comment

by:leblanc
ID: 40595899
Ahhh.. That makes sense.

My duration is 160.034 for the conversation. How do I find out the unit set for the duration. I was thinking ms but I just want to confirm it. Thx
0
 
LVL 2

Assisted Solution

by:UnHeardOf
UnHeardOf earned 500 total points
ID: 40595968
The help documenation regarding the fields for the Conversations is based on seconds. I know you can change the time format on the actual capture itself by going to view > Time Display Format.

Conversation Help Contents

8.4.2. The "Conversations" window
The conversations window is similar to the endpoint Window; see Section 8.5.2, “The "Endpoints" window” for a description of their common features. Along with addresses, packet counters, and byte counters the conversation window adds four columns: the time in seconds between the start of the capture and the start of the conversation ("Rel Start"), the duration of the conversation in seconds, and the average bits (not bytes) per second in each direction.
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 
LVL 1

Author Comment

by:leblanc
ID: 40596009
Yes. I see it now. That is interesting because my total capture time is 12 minutes and I just saw some duration that is around 660.00. I don't think it is in seconds because it would last longer than my capture time. I don't think I changed the duration in the past because I don't know how. So this must be ms somehow.
0
 
LVL 2

Expert Comment

by:UnHeardOf
ID: 40596017
12 minutes is 720 seconds. So that could be accurate and in seconds.
0
 
LVL 1

Author Comment

by:leblanc
ID: 40596023
Yes you are correct. I just realized that I made a mistake in my calculation. Thx
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question