How to find the transfer rate in Wireshark trace (Ethernet Interface)?

asked 2019-11-07 13:59:30 +0000

Sujith gravatar image

In WLAN, we used to enable a coloumn (IEEE 802.11 TX Rate & IEEE 802.11 RSSI) from the preferences to show the data rate and Antenna signal for each and every packet. I am wondering whether we can fetch the Data rate details from an ethernet interface. Can anyone help?

edit retag flag offensive close merge delete

Comments

Statistics ->Capture File Properties -> Statistics: Average bits/s
@SYN-bit talked about this at sf19us. Any other tips?

Chuckc gravatar imageChuckc ( 2019-11-07 14:09:26 +0000 )edit

That seems to be the bits transferred for the entire packets. I am actually looking to get the data rate of each and every packets transferred alike WLAN. I was hoping that if it is possible, then we could find the slowness in network during any traffic issues.

Sujith gravatar imageSujith ( 2019-11-07 14:21:25 +0000 )edit

There are three columns: Captured, Displayed and Marked
A Display Filter or manual marking of trouble times would give stats for a subset of packets.
The packet capture puts only a single timestamp on the packet. Sounds like you need start and end times for each packet reception?

Chuckc gravatar imageChuckc ( 2019-11-07 14:55:17 +0000 )edit

No no. Let me get this straight. When you are trying to capture a wireless interface and if you need to find the data rate (not time stamps)of each packet transmission then there is something called IEEE 802.11 TX RATE coloumn which you can enable from preferences->coloumns->add->IEEE 802.11 TX RATE. So now, on the GUI capture screen you will see a coloumn which shows the data rate. But I could not find this feature when it comes to an Ethernet interface.

Sujith gravatar imageSujith ( 2019-11-07 15:05:44 +0000 )edit

(Screen shots showing the 802.11 Rate in this presentation: https://sharkfestus.wireshark.org/sha...)
For Ethernet, the interface is either nailed to a specific speed/duplex or auto-negotiates.
It would be nice if the capture software collected this from the NIC.
Without that, if you had "size of packet/ (end time - start time)" then the bits/s could be calculated.
What software or tool are the captures done with?

Chuckc gravatar imageChuckc ( 2019-11-07 15:28:04 +0000 )edit