How can you measure throughput from a capture using built-in Wireshark tools?

• A. Use Statistics > IO Graphs and plot Bits/sec or Bytes/sec over time for the relevant conversation or interface.
• B. Use the Conversations window.
• C. Use the TCP RTT measurement tool.
• D. Use the DNS query rate.

Answer: (A)

Throughput is the data rate over time. To measure it from a capture in Wireshark, use IO Graphs: open Statistics > IO Graphs, pick Bits/sec or Bytes/sec for the graph, and scope it to the traffic you care about (a specific conversation or interface). The graph calculates rate from each packet’s size and its timestamp, giving you how many bits or bytes are transferred per second during the capture. This time-based view directly shows throughput for the chosen traffic and time window, which is exactly what you want.

The other tools don’t fit as well. The Conversations window shows data totals per conversation but not a time-series rate, so you’d miss how the throughput varied over time. The TCP RTT measurement tool focuses on latency, not data transfer speed. The DNS query rate measures how often DNS queries occur, not the overall payload throughput of the capture.