use IO Graph of wireshark to anayze a strange network problem

Wireshark have a useful function named IO Graph.

We have used the function to analyze a strange network problem.

[@more@]

Some guy told their application on linux always lost connection to sybase on unix at nearly fixed inteval about 5 minutes.

We used ping to detect the network connection between linux host and sybase unix host. It do lose some packages,but not so frequent.

After that ,We used tcpdump to capture all packages both on linux host and sybase unix host for about ten

minutes and saved to 2 files . Then we used wireshark to open the files using IO Graph to compare two network traffic graph. We found unix host cannot receive any message from linux host after 5 minutes. So we can believe there is something wrong with the data switcher .

In fact ,that proved to the truth when we asked help from network administrator to deal with the problem.

you can get another example from

http://sakananote2.blogspot.com/2008/12/wireshark-io-graphs.html

It really a good feature to analyze netword traffic.

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/14067/viewspace-1019230/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/14067/viewspace-1019230/