Wireshark: Mengukur Network Traffic
How to Use Wireshark to Measure Network Traffic LL#12973 created on Mar 29th, 2013, last modified on Jan 15th, 2014 Issue
One can obtain rough estimates of a camera's bit rate using its frame dimensions, frame rate, and compression format. Pelco publishes charts with this information. For example, the Endura Network Design Guide, pages 13 through 18, gives the average bit rate of many of Pelco's cameras with various configurations. For example, a NET5400T encoder streaming 30 frames per second measuring 704 pixels wide by 480 pixels high, encoded using the H.264 codec will consume about 1.8 mbps of traffic for its primary stream. However, the true bit rate will vary based on the type of motion and lighting present in a scene. Therefore, to obtain an exact measurement of traffic on an Endura network, a packet sniffer like Wireshark must be used. Product Line
Pelco Cameras, Pelco Video Management Environment
Endura video-management system, all versions Windows XP and later Pelco IP cameras Cause
The true bit rate from an IP camera will vary based on the type of motion and lighting present in a scene. Resolution
Contents
Installing Wireshark Measuring total traffic Measuring traffic from a specific camera Measuring traffic reaching an NSM5200
Installing Wireshark
Visit wireshark.org/download.html
Your operating system will be automatically detected and denoted by a green arrow. Simply click on that list item to begin the download process. (See figure 1 below.)
FIGURE 1
The Wireshark download page
Double-click on the file you downloaded in Step 2.
You can safely accept all the defaults. TShark and the User's Guide are optional, however. Be sure to install WinPcap when prompted and allow it to start at boot time.
Measuring total traffic
Open Wireshark and go to Capture → Interfaces.
Check the box next to the interface connected to your Endura network. If you are unsure which interface is connected to the Endura network, reference the IP address listed to the right of it.
Network packets will begin appearing on the screen as colored lines of text. (See figure 2, below.)
FIGURE 2
A Wireshark packet capture
Click on Statistics → IO Graph. (See Figure 3, below.)
FIGURE 3
The IO graph option in the statistics menu
Under Y Axis, change the unit from Packets/Tick to Bits/Tick.
To zoom in on the graph, change Pixels per tick from 5 to 10.
FIGURE 4
The IO graph
Measuring traffic from a specific camera
Follow the steps in Section II to obtain a capture and traffic graph.
Click on the Filter button inside the IO graph window.
Click to the right of Filter string and type ip.src== followed by the IP address of the camera you wish to measure, as shown in Figure 5, below.
FIGURE 5
The Wireshark Filter Dialog Box
Click OK to apply the filter to the graph.
Measuring traffic reaching an NSM5200
Open Endura Utilities
Right-click on the NSM5200 you wish to examine and choose SSH into.
FIGURE 6
Opening an SSH into an NSM5200
Log in with a user name of root and password of pel2899100.
Type tcpdump -s 0 -w capture.pcap and then press ENTER.
After the desired sample interval has passed, press CTRL + C to terminate the capture.
Return to Endura Utilities.
Select the NSM5200 in the left-hand pane, then right-click on it on the right and choose SCP → Copy files from.
FIGURE 7
Copying Files from an NSM5200
For the remote path, enter /root/capture.pcap
Double-click on the file you downloaded in step 7. The file will open in Wireshark.
Perform steps 4 through 6 of section II on the open file.