finding the multicast address in wireshark packet capture

a leaky bucket algorithm calculates how big the output queue should be that no packet drop will occur.

a counter shows how many times the number of packets in a burst was higher then limit specified.

based on sliding window algorythm max burst and max bandwidth is calculated.

a new entry is created for every new multicast stream.

every UDP packet is checked whether destination MAC address starts with '01:00:5E' (ethernet multicast address).

Measure how big the output buffer should be at a certain output speed (Leaky bucket algorithm).

Measure how big the bursts inside video streams are (sliding window algorithm).

To try out this dialog, a capture file containing MPEG2 Multicast streams can be found at SampleCaptures/video_ What you can do with Multicast stream analysis? Configuration Files and Folders.To access the Multicast streams analysis use the menu entry 'Statistics->Multicast Streams'.

For more information, see also: Section 7.7 Name Resolution of the Wireshark user guide as well as Appendix A.2. Add the entry or entries: Each entry will have the format as documented in man hosts.Create/Open your hosts file: If a hosts file already exists, open it using any text editor if it doesn't exist, then create an empty file named hosts and open it.Navigate to where the hosts file is located: Help -> About Wireshark -> Folders -> Personal configuration -> double-click on the folder.Enable network resolution: Edit -> Preferences -> Name Resolution -> Resolve network (IP) addresses -> Select -> OK.The hosts file is used for this purpose, not the ethers file.

Finding the multicast address in wireshark packet capture