Wireshark · Ethereal-users: RE: [Ethereal-users] Performance problems when capturing

[Jeff Parker <jparker@xxxxxxxxxxxx>]

Franz -
	I am not an Ethereal geek, though I play one on TV.

	In the transcript you send, have you noticed that you 
continue to request DNS name resolution, even though the 
responses you get (quite quickly) seem good.  It is as though 
the browser is not getting to share the input with Ethereal.  

	Perhaps others on the list have had more experience with 
XP "Professional".  

- jeff parker
- axiowave networks
- Cogito, ergo spud: I think, therefore I yam.  



> -----Original Message-----
> From: Franz Edler [mailto:franz.edler@xxxxxxxxxx]
> Sent: Thursday, January 03, 2002 11:41 AM
> To: 'Jeff Parker'
> Subject: RE: [Ethereal-users] Performance problems when capturing
> 
> 
> Hi Jeff,
> 
> These are my actual "Capture Preferences"
> 	Interface:	\Device\Packet_NdisWanIp
> 	Count:	(0) Infinite
> 	File Size: 	(0) Infinite
> 	Duration:	(0) Infinite
> 	Filter:	empty
> 	File:		empty 
> 	Capture length: 65535
> 	Capture Packets in promiscuous mode:	disabled
> 	Use ring buffer:	disabled
> 	Update list of packets in real time:	disabled
> 	Enable MAC name resolution:	disabled
> 	Enable network name resolution:	disabled
> 	Enable transport name resolution: 	disabled
> 
> I made just the following test:
> - activate the network connection (ISDN-link)
> - after 10 seconds (stable connection): start of capture with Ethereal
> - start of my browser (IE 6), which normally loads www.orf.at as start
> page 
>   within a second
> - after waiting for 25 seconds for loading the start page 
>   the browser comes with an error: "cannot find server or DNS error"
>   meanwhile Ethereal has captured 31 packets
> - stop Ethereal and look at the display window
> - save file to the disk
> 
> I have attached the capture-file, if you want to look at.
> 
> Do you have an idea what to do?
> 
> I thank you for your help, but I do not want to bother you.
> regards Franz
> 
> 
> -----Original Message-----
> From: Jeff Parker [mailto:jparker@xxxxxxxxxxxx] 
> Sent: Thursday, January 03, 2002 4:47 PM
> To: 'Franz Edler'
> Subject: RE: [Ethereal-users] Performance problems when capturing
> 
> Franz -
> 	One thing that can slow you down is if the act of 
> using Ethereal causes network activity.  Your disabling
> name resolution is a good idea.  
> 	Are you storing the data on a network drive?
> Using X-Windows to view the display from another port?
> Have you tried with and without "continuous update?"
> 
> - jeff parker
> - axiowave networks
> - Cogito, ergo spud: I think, therefore I yam.  
> 
> 
> 
> > -----Original Message-----
> > From: Franz Edler [mailto:franz.edler@xxxxxxxxxx]
> > Sent: Thursday, January 03, 2002 10:43 AM
> > To: ethereal-users@xxxxxxxxxxxx
> > Subject: [Ethereal-users] Performance problems when capturing
> > 
> > 
> > Hello folks,
> > 
> > since yesterday I am using Ethereal version 0.9.0 on my Windows XP
> > professional PC just as a beginner. 
> > 
> > The protocol analyzer works fine in principle, but there are 
> > performance
> > problems. My experience is, that despite of disabling name 
> resolution
> > during capturing, the PC is slowing down, so that is not 
> even possible
> > to activate the web-browser (due to timeout at DNS query, 
> as far as I
> > can see).
> > 
> > My PC is a 1,4 GHz Pentium IV and my WAN link (where I 
> capture) is an
> > ISDN dial up connection. Is this low-performance experience a 
> > usual one,
> > or can I do anything to get a better performance?
> > 
> > Thanks for help & hints
> > 
> > Franz
> > 
> > 
> > _______________________________________________
> > Ethereal-users mailing list
> > Ethereal-users@xxxxxxxxxxxx
> > http://www.ethereal.com/mailman/listinfo/ethereal-users
> > 
>