Wireshark · Wireshark-users: Re: [Wireshark-users] Terminal Server traffic

[Jaap Keuter <jaap.keuter@xxxxxxxxx>]

Hi,

I may be dependant how you configured the monitoring port on the core router. 
If it captures both ingress and egress packets it start to see double. The 
details I leave to the network operator buffs ;) .

Thanx,
Jaap

Albert Jurado wrote:
> As of last week we started to monitor traffic from our internal Terminal 
> Server to our internal SQL server using wireshark.
>
> Our network is segmented in the following way:
>
> VLAN for servers
>
> Data VLAN for each floor in the building (six in total).
>
> We installed wireshark on a separate workstation plugged into our core 
> router with a monitoring port configured
>
> Our first capture revealed over 40% of the traffic as “out-of-order” 
> packets.  When we performed a capture from the terminal server there was 
> no such traffic. 
>
> I wondering if this type of behavior is normal for terminal server 
> communication.  I hope someone can shed some light on this matter for 
> me, it would greatly appreciated.
>
> Thanks!
>
> *Albert Jurado*