In most cases, clients are talking to servers to support services requested by users. We typically should not see clients communicating directly with other clients on our subnets, unless there is some file sharing or other type of expected activity. In this video, we will look at how to filter for intra-subnet conversations - clients […]

Ever wonder where in the world IP conversations are coming from? In this video, we show how to configure and use the GeoIP feature of Wireshark. This allows us to get GPS coordinates for IP addresses in the trace files. https://youtu.be/VZUX0KwKRHY Here is the link to the MaxMind Databases: http://dev.maxmind.com/geoip/legacy/geolite/ Enjoy!

This video shows a common display filter that can be used in Wireshark to filter for slow web transactions to a server. Using this filter, you can quickly isolate slow application responses, which helps to get the blame off the network and into the right place. Enjoy!

This case study shows how we dug into a problem where a client had intermittent connectivity to the internet. Some applications worked while others did not. It affected all users in a small office. The capture file showed several TCP resets. What did they tell us? What were the next steps? What key header values […]

When packets that support applications are dropped, these need to be retransmitted by either the client or the server. TCP retransmissions take time, which ultimately can cause performance to suffer. The tough part is finding the links and pathways on the network that are dropping traffic and resolving this packet loss if possible. Here is […]

After installing Wireshark, there are a few basic things that can be configured before starting analysis. In this short video, we cover configuring a profile, toggling packet coloring, basic display filters, and adding a delta time column. These basic things can go a long way in reading and interpreting network and application performance problems.   […]