Network traffic analysis using wireshark in solving network problems

Abstract

Network traffic analysis is an arrangement of strategies that are progressively used to evaluate the transfer of packets across a network. This movement of information encompasses the period and length of the transferred packets and the state of the correspondence packets. The analysis of system activity gives data about the client as well as the destination of packets thereby enabling system administrators get information to help the network. Analysis of network activity is a significant undertaking resulting in valuable contributions both to the commercial sector and the research community. The study explores the use of networking tools as well as models to ensure network efficiency. To be able to capture data traffic, Wireshark application was installed and run to capture packets of data passing through the network interface card. Other tools like Microsoft Windows 7/Win Server 2008, Microsoft Office 2007, Mozilla Firefox and Wincap was used to support the study. The study revealed that when packets are captured using the Wireshark, the application indicates the date the activity was carried out on the subnet. Those packets traverses therefore if the source is known an inference can be made as whether at that time the use was supposed to work or not so that date and timing can be monitored. The study found that by virtue of knowing the source and destination of the IP address, administrators can easily identify the user of that particular personal computer. The study recommends that in order to maintain undisturbed links in the network, activities of users of the network must be monitored to find out what they do with their personal computers that is connected to the organization’s network.