Wireshark-users: Re: [Wireshark-users] Intermittent Performance Problems on Intranet
From: "Ryan Zuidema" <Ryan.Zuidema@xxxxxxxxxxx>
Date: Thu, 6 Nov 2008 17:13:14 -0700

Spiro,

 

Yes that is exactly what Wireshark is good for, and for a beginner that is an excellent place to start. You will want to capture off of a mirrored/span port to begin with if possible. Running a live capture on the server could use up more resources, and potentially give you a false reading. If you have to capture on the server, you will need to run a simultaneous capture on an affected client as well.

 

Take a capture and pay attention to the timing between request and response from the server.

 

Ryan Zuidema

 

 

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Cyril Spiro
Sent: 2008-11-06 07:04
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Intermittent Performance Problems on Intranet

 

Hi, I'm a newbie to Wireshark :)

 

Our users on our Intranet are stating that their Web Application can get slow at times.  If we run Wireshark on the Web server can we use it to determine if the packets are being slowed down once they have gotten in the Web server (ie, slow database calls, etc.) versus outside of the Web server on the network?

 

Thanks,

spiroc