This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How can I draw a “network graph” with Wireshark?

0

I have also same question, suppose we have captured network traffic and if i want see network graph of that traffic. how can we implement that in wireshark. for e.g. i want to see source address and destination address in graph. how to do that?

asked 04 Apr '15, 05:42

ankit's gravatar image

ankit
65232328
accept rate: 25%

converted 06 Apr '15, 02:52

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237

@ankit: I converted your comment to a question, as the OP of the other question might have lost interest in his question.

(06 Apr '15, 02:53) Kurt Knochner ♦

One Answer:

0

See my answer to similar questions:

https://ask.wireshark.org/questions/24163/network-topology-graph
https://ask.wireshark.org/questions/26805/chart-network-traffic

In short, there are several graphs that you can draw with Wireshark, but probably none of them is what you are looking for. Your question sounds more like a way to create a infrastructure graph (nice image of the whole network, including routers, etc.) or a communication graph (who is talking to whom). In that case, that functionality is not implemented in Wireshark.

Please check etherape, which is able to draw "communication graphs".

http://etherape.sourceforge.net/

or some other tools/ways to create graphs from pcap files.

https://github.com/mateuszk87/PcapViz
http://nbviewer.ipython.org/github/SuperCowPowers/workbench/blob/master/workbench/notebooks/PCAP_to_Graph.ipynb
http://raffy.ch/blog/2012/03/21/visualizing-packet-captures-for-fun-and-profit/

Regards
Kurt

answered 06 Apr '15, 03:01

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%