Difference between revisions of "Ethereal"

From TD-er's Wiki
Jump to navigationJump to search
Line 10: Line 10:
 
  ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255
 
  ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255
  
−
== Voice only analysis ==
+
We did also do some [[Ethereal Analysis]] on the traffic during several conversations.
−
 
 
−
The following screenshot shows network-traffic (in Bytes/s) for the following connections:
 
−
 
 
−
* '''Black''': traffic from and to Trixbox #1
 
−
* '''Red''': traffic between the 2 Windows machines running X-lite
 
−
* '''Green''': traffic between laptop #1 and its Asterisk
 
−
* '''Blue''': traffic between the two Asterisk PBX's
 
−
* '''Pink''': traffic between Windows machine #1 and its Asterisk
 
−
 
 
−
[[Image:ethereal_graph_voice-only.png]]
 
−
 
 
−
From the graph shown above there can be concluded that indeed the two X-Lite machines are only connected to their own Trixbox, i.e. there is no ''direct'' traffic between the two X-Lite machines.
 
−
 
 
−
== Voice and video analysis ==
 

Revision as of 13:48, 30 January 2007

Ethereal is used to analyse the network traffic.

We captured the network data with the following machines: 

192.168.1.101 - Asterisk #1
192.168.1.106 - Asterisk #2
192.168.1.3   - Windows machine 1 (also running both VMware's for both Trixboxes)
192.168.1.189 - Laptop #1 running only X-lite

After capturing we filtered out other data to machines not on the local network (IP-adress other than 192.168.1.x), using this filter: 

ip.src >= 192.168.1.1 && ip.src <= 192.168.1.255 && ip.dst >= 192.168.1.1 && ip.dst <= 192.168.1.255

We did also do some Ethereal Analysis on the traffic during several conversations.

Retrieved from "https://wiki.td-er.nl/index.php?title=Ethereal&oldid=1546"