You're reading from Network Analysis using Wireshark Cookbook This book will be a massive ally in troubleshooting your network using Wireshark, the world's most popular analyzer. Over 100 practical recipes provide a focus on real-life situations, helping you resolve your own individual issues.

Product type Paperback

Published in Dec 2013

Publisher Packt

ISBN-13 9781849517645

Length 452 pages

Edition 1st Edition

Tools

Wireshark

Concepts

Network Security

Author (1):

Yoram Orzach

View More author details

Table of Contents (17) Chapters

Preface

1. Introducing Wireshark FREE CHAPTER

2. Using Capture Filters

3. Using Display Filters

4. Using Basic Statistics Tools

5. Using Advanced Statistics Tools

6. Using the Expert Infos Window

7. Ethernet, LAN Switching, and Wireless LAN

8. ARP and IP Analysis

9. UDP/TCP Analysis

10. HTTP and DNS

11. Analyzing Enterprise Applications' Behavior

12. SIP, Multimedia, and IP Telephony

13. Troubleshooting Bandwidth and Delay Problems

14. Understanding Network Security

A. Links, Tools, and Reading

Index

Discovering delay/jitter-related application problems

Jitter and delay can influence various types of applications. In applications that run over TCP, high delay reduces the effective throughput that can be sent and high jitter can cause packet losses and retransmissions. In multimedia applications that run over RTP, which runs over UDP, high jitter and delay can cause severe disturbances in the voice and video quality.

In this recipe, we will get into the details: the influence of behavior on TCP, and how it can influence the application behavior. RTP over UDP behavior was discussed in Chapter 12, SIP, Multimedia, and IP Telephony.

Getting ready

When you ping a remote site and get high delays, and in the Wireshark you see many retransmissions, it can be because of high network or applications delay. Connect the Wireshark to the network and configure port mirror to the link that you test.

The purpose of this recipe is to check whether the TCP retransmissions and duplicate ACKs are due to delay...