What is Statistic and IPv4 Statistic in Wireshark?

There are features in Wireshark called "Statistics" and "IPv4 Statistics" that let you view various statistical data about the packets recorded during a network traffic study. You can learn more about the characteristics of network traffic and spot patterns or problems with the help of these data.

Statistics:

For evaluating and interpreting network data that has been gathered, various fields and choices are available in the Wireshark Statistics menu.

• You can view a range of statistics pertaining to the packets that Wireshark captured by selecting the "Statistics" menu. These choices include dialogues, endpoint statistics, protocol hierarchy statistics, and more.
• Statistics for the Protocol Hierarchy: This option reveals the number of packets, bytes, and percentage of each network protocol used in the captured traffic, as well as a breakdown of the various protocols employed.
• Network talks between endpoints can be viewed statistically using this option, which displays information like the number of packets, bytes, and time spent on each conversation.
• Endpoints: Endpoint statistics show details about specific hosts, such as the quantity of packets and bytes that each host has transmitted and received.as well as numerous other data on I/O graphs, RTP (Real-time Transport Protocol), HTTP, DNS, etc.
• IO Graphs Traffic over time is graphically represented using IO Graphs. To visualize trends in network activity, you can create graphs that display packet rate, bytes per second, or other data.
• RTP Statistics: This option delivers statistics specific to RTP streams if you're working with Real-time Transport Protocol (RTP) traffic, frequently used for audio and video communication.
• HTTP data: If you're interested in web traffic, this option provides information on how the HTTP protocol is used, including data on URIs, response codes, and content kinds.
• DNS Statistics: This choice offers data on DNS requests and replies, as well as the most popular domains and IP addresses.
• And more: For particular protocols and analytic requirements, such as SIP (Session Initiation Protocol), SMB (Server Message Block), and more, Wireshark gives additional statistics options.

Network administrators, security analysts, and troubleshooting professionals can:

Need help with network performance.

Recognize irregularities or suspicious conduct.

Gaining knowledge of network dynamics.

Investigate network issues.

Analyze how certain applications or protocols affect network traffic.

Overall, Wireshark's "Statistics" feature is useful for comprehending network traffic and identifying network-related problems. It provides a higher-level perspective on network behaviour and patterns, which is a supplement to packet-level research.

IPV4 Statistic:

• Internet Protocol version 4 (IPv4) traffic is the focus of the Wireshark statistics subset known as IPv4 Statistics.
• You can obtain information about IPv4 packets, including specifics about various fields in IPv4 headers, such as time to live (TTL), source and destination IP addresses, and more when you choose "IPv4 Statistics" from the "Statistics" menu.
• This option is helpful when examining and comprehending the peculiarities of IPv4 traffic in your network capture.
• In Wireshark, the term "IPv4 statistics" refers to statistical data about IPv4 (Internet Protocol version 4) packets in a network capture. One of the essential protocols used at the network layer to address and route packets over the Internet and many private networks is IPv4. Understanding the distribution, behaviour, and properties of IPv4 traffic inside a recorded network trace can be gained by analyzing IPv4 statistics.
• Internet Protocol Version 4 (IPv4), also known as IPv4, is a widely used network protocol that enables device communication over the Internet. Most Internet communications are built on this fourth version of the Internet Protocol.
• The primary protocol of the Internet layer is Internet Protocol version 4 (IPv4). Packets can be sent from one host to another using 32-bit addresses.
• Some sub-functions in IPv4 Statistics are used to distinguish between all packets, including the type of IP address, its source and destination, and its origin and destination addresses.

To access IPv4 statistics in Wireshark, follow these steps:

• Start a live capture on a network interface or load a capture file into Wireshark.
• Navigate to the "Statistics" menu in the main Wireshark window.
• Choose "IPv4 Statistics" from the drop-down menu next to "Statistics."

The "IPv4 Statistics" window often offers data and statistics about various IPv4 packet characteristics, such as:

1) General Statistics:

Total number of IPv4 packets in the capture, according to general statistics.

Number of packets, both fragmented and unfragmented.

Number of options-containing packets, such as IP header options.

2) Fragmentation Statistics:

Details on the number of fragments, reassembled packets, and fragmentation types applied (e.g., Don't Fragment, More Fragments) to the fragmented packets.

3) Addresses for the Source and Destination:

The most common source and destination IPv4 addresses are identified in the capture, along with a count of the packets.

4) Time-to-Live (TTL) Statistics: TTL value distribution in collected packets.

TTL values are used to shorten a packet's network lifetime.

5) Checksum Errors: The number of packets with inaccurate or invalid checksums may be a sign of corrupted data.

6)IP Options Statistics: Details on the kinds of IP header options utilized in the collected packets, if any.

7) Precedence/Differentiated Services Field: Information about the Differentiated Services Code Point (DSCP) or IP precedence field, which is used to classify and order packets in Quality of Service (QoS) settings.

8) Date and Time Information:

When examining traffic patterns and network activity, knowing how long it takes between packets containing IPv4 headers can be helpful.

Network administrators, security analysts, and troubleshooting specialists can all benefit from using "Statistics" and "IPv4 Statistics" to examine network traffic patterns, spot anomalies, and learn more about how networked devices and protocols behave. They support network performance monitoring and problem diagnosis.