From the course: Wireshark: Functionality

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Using graphs

Using graphs

- [Instructor] Wireshark has several graphs that can visually show the traffic patterns. In this segment, we'll review flow graphs, I/O graphs, and TCP stream graphs to improve your troubleshooting skills. Let's start with a discussion on a flow graph. In Wireshark, a flow graph tells the story of what happened during the capture and provides information about the types of traffic exchanged between the endpoints. Key uses for this type of graph include troubleshooting, protocol analysis, along with visualizing the flow during an incident. To demonstrate this graph, we'll use small flows. And to start, we'll go to Statistics and then Flow Graph. Now, depending on the size of your capture, it might take a few seconds to load. But then once loaded, we can go in and filter it by a specific type of flow. For example, I'll drop this down and select ICMP. And now we just see the ICMP flows. We can also Limit to display filter if we've used one. Next, let's talk about I/O graphs and TCP…

Contents