From the course: Wireshark: Network Troubleshooting
Unlock the full course today
Join today to access over 24,900 courses taught by industry experts.
Identifying bursty traffic - Wireshark Tutorial
From the course: Wireshark: Network Troubleshooting
Identifying bursty traffic
- [Instructor] Multicast traffic is either a one-to-many or many-to-many data transmission. The range for multicast is between 224.0.0.0 to 239.255.255.255. You'll see multicast traffic on your network, as it's used in a wide range of applications. Multicast traffic doesn't always behave, and it may become bursty. Bursty traffic can disrupt the flow of traffic. What happens is, when traffic reaches a device, such as a switch or router, the buffers may be full or overwhelmed by the burst and can result in an output drop. Common methods to deal with this are by policing or shaping the traffic. While policing flattens the burst, as you see in this graphic, a better way to manage traffic is by shaping, which smooths the output, as we see in this graphic. However, if the traffic is not properly policed or shaped, you will see bursty traffic. Let's take a look. I'm at this website, and we can download an example file by…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
- (Locked) Troubleshooting the Network4m 28s
- (Locked) Spotting an ARP Storm1m 55s
- (Locked) Identifying bursty traffic2m 42s
- (Locked) Protecting from packet sniffing2m 16s
- (Locked) Examining Macof attacks6m 29s
- (Locked) Challenge: Identify a scanning signature2m 31s
- (Locked) Solution: Identify a scanning signature6m 11s
- (Locked)
-