One of Wireshark's strengths is its statistical tools. When using Wireshark, we have various types of tools, starting from the simple tools for listing end-nodes and conversations, to the more sophisticated tools such as flow and I/O graphs.
In the following two chapters, we will learn how to use these tools. In this chapter, we will look at the simple tools that provide us with basic network statistics—that is, who talks to whom over the network, what are the chatty devices, what packet sizes run over the network, and so on. In the next chapter, we'll get into tools such as I/O and stream graphs, which provide us with much more information about the behavior of the network.
There are some tools that we will not talk about—some that are quite obvious (for example, packet sizes), and some that are less common (such as ANSP, BACnet, NCP, and...