From the course: Wireshark: Network Troubleshooting
Unlock the full course today
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Response: Examining evidence of congestion - Wireshark Tutorial
From the course: Wireshark: Network Troubleshooting
Response: Examining evidence of congestion
(upbeat music) - [Instructor] So, how did you do? We'll let's review. I've opened up smallflows.pcap And the first thing we're to do is filter on TCP stream 16. Now there are a number of different ways we can do this, but the easiest way is select any TCP stream, right click, and say follow the TCP stream. And I'll close this window. And then all I need to do is modify the display filter to say TCP stream equals 16. And then press enter. The next one is open the expert system. So I go to the lower left hand corner, select once, and then I want to limit to display filter. So I go down below, limit to display filter. The next question is how many retransmissions are listed? So we can take a look up here. And this frame is the suspected retransmission. And we can see on the far right that there are seven retransmissions. Another thing we want to do is see who is sending the retransmissions, the client or the server?…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
Getting the most out of Wireshark6m 15s
-
(Locked)
Navigating the Wireshark interface5m 19s
-
(Locked)
Investigating the Edit Menu choice5m 11s
-
(Locked)
Exploring the View Menu choice6m 47s
-
(Locked)
Getting ready to capture4m 50s
-
(Locked)
Examining a capture4m 22s
-
(Locked)
Challenge: Examining evidence of congestion36s
-
(Locked)
Response: Examining evidence of congestion1m 55s
-
-
-
-
-