Missing data patterns and inferences
I'm a data scientist new to Wireshark/networking data. I pulled some fields from a .pcap
file and exported them to a .csv
. I see many blank fields for some packets. Are there patterns of missingness from which useful inferences can be drawn about the participants in a conversation? What might such patterns be?
Not all packets have the same fields.
Do you have an example of blank fields?