CE257:Data communication and networking .

CE257-Data Communication & Networking

Assignment 2: Analyzing network packets using Wireshark
Submission Deadline: 11:55 PM on October 17, 2021 (Hard Deadline)
Wireshark is a packet sniffer and network protocol analyzer tool. It helps to capture network
packets and understands the structure of different networking protocols.
Instructions:
 Install Wireshark (www.wireshark.org) and learn how to capture packets and filter the
required content. You may refer these links for learning of the same:
o https://www.youtube.com/watch?v=k6rx1krSUAo
o https://www.youtube.com/watch?v=lb1Dw0elw0Q
 You should carry out your experiments across different network conditions including
different time (s) of the day and locations (e.g., lab or hostel etc). (Student can select any
one/multiple destination/application (from Annexure 1) to give answers (without copy
and paste from any source!) of questions below)
 It is advisable to provide only trace based description while answering the questions.
While answering, provide snapshots of the traces in the report and highlight the content as
and when required.
Questions:
1. Highlight and explain the significance of observed values for various fields of the
protocols. Example, Source or destination IP address and port no., Ethernet address,
protocol number, etc.
2. Calculate the following statistics from your traces while performing experiments:
Throughput, RTT, Packet size, number of UDP & TCP packets etc. Report the
observed values in your answer, preferably using tables. You can use any web address
(similar to Annexure-1) to analyze your packets.
Submit a soft copy of the report, preferably PDF, using this naming convention:
“Your_Rollno_Assign2”. Files submitted without proper naming format will not be
evaluated.

Annexure – 1: Applications
 Dropbox
 Google Hangout
 Live Sports Streaming
 Online Games
 Any social media or e-commerce websites that students use daily like LinkedIn, Amazon,
Facebook etc.

Page 1 of 9
CE257:Data communication and networking .

Reference
1. Statistics in Wireshark:
https://www.wireshark.org/docs/wsug_html_chunked/ChUseStatisticsMenuSection.html
2. Video on statistic summary: https://www.youtube.com/watch?v=JxRmuC722fY

Note: Sample example is shown below.

Case 1: www.dailymotion.com

Network Conditions: Analysis of dailymotion.com using laptop in Wireshark

 Operating System: windows 11
 Arrival Time (): Oct 2, 2021 06:43:33.364312000 IST
o <at the Time of TCP handshake >

 ISP: GTPL Broadband Pvt. Ltd. Connected with home router

o <use: https://www.whoismyisp.org/>

Figure 1: Captured file properties

Page 2 of 9
CE257:Data communication and networking .

Table 1: observed values for various fields of the protocols

Field Value Description
Source IP address 192.168.0.106 IP address of laptop as seen
from router
Destination IP address 35.244.47.206 IP address of
dailymotion.com
Source Port 49268 Sending device port
Destination Port 443 Receiving device port
Ethernet address of source 84:d8:1b:d1:81:da MAC address of laptop
(Source MAC)
Ethernet address of 18:47:3d:8f:82:5f MAC address of router
destination (Destination
MAC)
Protocol number 4 (IPV4) The numeric identification
of the upper layer protocol
that an IP packet should be
sent to

Network Statistics
1. Throughput
<Wireshark: Statistics -> TCP Stream Graph -> Throughput>
Value:

Page 3 of 9
CE257:Data communication and networking .

Figure 2: Throughput for dailymotion.com

2. RTT (Round Trip Time)

Figure 3: RTT for dailymotion.com

Page 4 of 9
CE257:Data communication and networking .

3. Packet size

Figure 4: packet length analysis

4. Number of UDP & TCP packets

<using IPv4 statistics>
 TCP packets : 933 <filter: ip.addr == 35.244.47.206 && tcp>
 UDP packets: 0 < ip.addr == 35.244.47.206 && udp>

Note: Student’s experiment:

 Case 2: twitter.com
Network Conditions: Analysis of twitter.com using laptop in Wireshark
o Operating System: windows 10
o Arrival Time (): Oct 17, 2021 19:25:46.573680000 IST

o ISP: Bharti Airtel Ltd.

o <use: https://www.whoismyisp.org/>

Page 5 of 9
CE257:Data communication and networking .

Figure 5: Captured file properties

Table 2: observed values for various fields of the protocols

Field Value Description
Source IP address 172.20.10.3 IP address of laptop as seen
from router
Destination IP address 104.244.42.129 IP address of twitter.com
Source Port 52121 Sending device port
Destination Port 443 Receiving device port
Ethernet address of source 60:67:20:bf:2e:90 MAC address of laptop
(Source MAC)
Ethernet address of 6e:72:e7:3c:b2:64 MAC address of router
destination (Destination
MAC)
Protocol number 4(IPV4) The numeric identification
of the upper layer protocol
that an IP packet should be
sent to.

Page 6 of 9
CE257:Data communication and networking .

Network Statistics
1. Throughput
Value:

Figure 6: Throughput for twitter.com.RTT (Round Trip Time)

Page 7 of 9
CE257:Data communication and networking .

2.RTT (Round Trip Time)

Figure 7: RTT for twitter.com

Page 8 of 9
CE257:Data communication and networking .

3.Packet size

Figure 8: packet length analysis

4.Number of UDP & TCP packets

Page 9 of 9