Wireshark-users: [Wireshark-users] Help needed
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: akshay vashishtha <akshay123_vashishtha@xxxxxxxxx>
Date: Thu, 23 Jun 2011 04:25:26 -0700 (PDT)
Hi Everyone,
 
I did not mention the actual problem in the subject line as it would not have been very clear if i would have written it there. :) Ok..Let me tell you the problem.
 
I'm doing a capture on the web server. The web server contacts the SQL server for getting the data. Now, there are many ports (say 10 - ports ranging from 4001 to 4010) on web server which contacted the SQL server on port 3180 (used for SQL transactions) in my capture.
There is a behavior called 'tcp piplelining' which happens between the Web and SQL server. Let me explain you what i'm trying to say. As there are many users who are accessing the website, the data of many users (say 5 users) are going through the same port (say port no 4001) from web server to the sql server. Similarly for all  other ports. So, while troubleshooting I'm not able to differentiate my traffic which my system generated.One solution is to do capture in a single user window.
Is there any other tool which can show my data separately i.e. do not mix it with the data of other users??
 
Regards,
Akshay