Wireshark抓包分析.pptx

Wireshark抓包分析
@
Wireshark的安装
云视频
目录
Wireshark的使用
How to read message?
网络设备对我们的影响
How to capture?
断线问题案例
ALG故障案例
交换机镜像(Mirror + Wireshark)
设备本身抓包(下载后,使用Wireshark进行分析)
RPAD抓包的方法
DMA抓包的方法
RPD抓包的方法
RMX抓包的方法
How to capture?
Wireshark的安装
注意以下界面,一定要安装WINCAP。
Wireshark的使用
Filter
Wireshark的使用
Important things first: Wireshark will not usually recognize any VoIP calls in a capture unless call signaling (, , SIP/SDP) is also included inthe capture.
Captures which do not include call signaling will list RTP as UDP packets; as TCP packets only.
Wireshark的使用
分析RTP Stream
①Wireshark considers all out-of-order packets as being lost.
②Wireshark will NOT consider late-arriving packets as
being lost if the packets are still captured in order, nomatter
how late those packets arrive.
③Jitter calculations done by Wireshark should be ignored.
Wireshark的使用
分析TCP Stream