How to Implement Network Wireshark Analysis in ns3

To implement the network Wireshark analysis in ns3 has encompasses to emulate the network and then investigate the Wireshark. Basically, the Wireshark is a network protocol that analyser permits to scrutinize network traffic in detail.

Our developers can help you achieve flawless Network Wireshark Analysis implementation in your ns3 program.

We provide the procedure to achieve this process through ns3:

Step-by-Step Implementation:

Step 1: Setup ns3 Environment

Make certain ns3 is installed in the system.

Step 2: Include Necessary Modules

Include the necessary ns3 modules in your script:

#include “ns3/core-module.h”

#include “ns3/network-module.h”

#include “ns3/internet-module.h”

#include “ns3/point-to-point-module.h”

#include “ns3/applications-module.h”

#include “ns3/flow-monitor-module.h”

Step 3: Create the Simulation Script

1. Setup Nodes and Network:

using namespace ns3;

NS_LOG_COMPONENT_DEFINE (“NetworkWiresharkAnalysisExample”);

int main (int argc, char *argv[])

{

CommandLine cmd;

cmd.Parse (argc, argv);

// Create nodes

NodeContainer nodes;

nodes.Create (4);

// Create point-to-point links

PointToPointHelper pointToPoint;

pointToPoint.SetDeviceAttribute (“DataRate”, StringValue (“10Mbps”));

pointToPoint.SetChannelAttribute (“Delay”, StringValue (“2ms”));

NetDeviceContainer devices;

devices = pointToPoint.Install (NodeContainer (nodes.Get (0), nodes.Get (1)));

devices.Add (pointToPoint.Install (NodeContainer (nodes.Get (1), nodes.Get (2))));

devices.Add (pointToPoint.Install (NodeContainer (nodes.Get (2), nodes.Get (3))));

// Install Internet stack

InternetStackHelper stack;

stack.Install (nodes);

// Assign IP addresses

Ipv4AddressHelper address;

address.SetBase (“10.1.1.0”, “255.255.255.0”);

Ipv4InterfaceContainer interfaces = address.Assign (devices);

// Set up applications

uint16_t port = 9;  // Discard port (RFC 863)

// Server application on node 3

Address serverAddress (InetSocketAddress (Ipv4Address::GetAny (), port));

PacketSinkHelper packetSinkHelper (“ns3::UdpSocketFactory”, serverAddress);

ApplicationContainer sinkApps = packetSinkHelper.Install (nodes.Get (3));

sinkApps.Start (Seconds (1.0));

sinkApps.Stop (Seconds (20.0));

// Client application on node 0

OnOffHelper onoff (“ns3::UdpSocketFactory”, Address (InetSocketAddress (interfaces.GetAddress (3), port)));

onoff.SetConstantRate (DataRate (“1Mbps”));

ApplicationContainer apps = onoff.Install (nodes.Get (0));

apps.Start (Seconds (2.0));

apps.Stop (Seconds (20.0));

// Enable pcap tracing for Wireshark analysis

pointToPoint.EnablePcapAll (“network-wireshark-analysis”);

Simulator::Stop (Seconds (20.0));

Simulator::Run ();

Simulator::Destroy ();

return 0;

}

Step 4: Run the Simulation

Compile and run your simulation script:

sh

./waf configure

./waf build

./waf –run NetworkWiresharkAnalysisExample

This will generate a set of .pcap files (one for each link in the network), which can be opened in Wireshark for analysis.

Explanation

• Node Creation: Create nodes representing different devices in the network.
• Point-to-Point Links: Configure point-to-point links between nodes with specified data rates and delays.
• Internet Stack: Install the Internet stack on all nodes.
• IP Configuration: Assign IP addresses to the interfaces.
• Applications: Use OnOffApplication and PacketSink to simulate traffic between nodes.
• Pcap Tracing: Enable pcap tracing on the point-to-point links to capture packets.

Step 5: Analyse with Wireshark

1. Open Wireshark:
   • Open Wireshark on your system.
2. Load the pcap Files:
   • Load the generated .pcap files from the ns-3 simulation directory (typically found in the scratch or ns-3.x/build directory).
3. Analyse Traffic:
   • Use Wireshark’s features to analyze the captured traffic. You can inspect packet details, filter packets by protocol, follow TCP/UDP streams, and much more.

Advanced Wireshark Analysis Techniques

1. Filtering Specific Traffic:

Use Wireshark filters to analyze specific types of traffic. For example, to filter UDP traffic:

plaintext

udp

1. Following Streams:

Follow a specific TCP or UDP stream to see the entire conversation between endpoints.

1. • Right-click on a packet and select Follow > TCP Stream or Follow > UDP Stream.
2. Inspecting Protocol Details:

Inspect detailed protocol information for each packet.

1. • Expand the packet details pane to see layer-by-layer protocol information.
2. Using Coloring Rules:

Use Wireshark’s coloring rules to highlight specific types of traffic for easier analysis.

1. • Go to View > Coloring Rules and customize the rules as needed.
2. Exporting Data:

Export specific data from the captured packets.

1. • Go to File > Export Packet Dissections to export packet details in various formats.

In the end, we clearly learned about how the network wireshark implement and evaluate the network traffic using the ns3 tool and also provide the more information regarding the network wireshark.