Case Study

Case Study: Hudson WP Application Slow Response Time

Case Study: Bypass or Not To Bypass (TCP Reneging).

Case Study: Greenwood Application Response Time

Case Study #132 Gearbit Finding the WEB Server Application Issue

Case St

Case Study: Bypass-TAP

Timing, Most Important Thing is Comedy and Packet Traces Too

In the movie “A Good Year”, young Max Skinner, spends his childhood summer holidays learning to appreciate the finer things in life at his Uncle Henry's vineyard estate in Provence in southeastern France. Uncle Henry asks the question what’s the most important thing in comedy, and as Max answers, the Uncle Henry interrupts with the response “timing”. The young Max is embarrassed, but he gets it.

wireshark protocol analyzer View time di

Troubleshooting with Gearbit and Profitap article that I wrote, one pc that’s infected with a virus that sending ARPs out every .000003 (3 microseconds) causing slow response-time, slow connecting to the network and slow telnet-sessions. You can quickly see that the Time column shows this very quickly, and indicating something is very wrong. The Key here ARP packets are being sent out a wire-speed, so fast it's creating problems for other devices to communicate. 

Wireshark packet trace PC ARPing 3 milli

In this next example, the Time column shows delta time, indicating the time from the displayed packet. As you examine the packets you quickly notice they are all the same packet indicated by the IP ID hex value 0x1cc3 shown in the display filter. So why is the delta time so quick? The delta time here is not as fast, or low as the previous packet trace but quicker than what we would expect. You also notice the TTL or IP time-to-live is decrementing down, indicating a routing loop. 

wireshark packet trace showing delta tim

So here are a few examples of Timing, and like the young Max Skinner learning from experience.