[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-users
Subject:    Re: [Wireshark-users] Fw: Re:  How to find the bottleneck?
From:       Hugo van der Kooij <hugo.van.der.kooij () qsight ! nl>
Date:       2017-08-29 13:21:54
Message-ID: 20170829132252.87AC64461E () mail ! wireshark ! org
[Download RAW message or body]

This message contains a digitally signed email which can be read by opening the attachment.

Hugo van der Kooij 
network engineer 

QSight IT 

T : +31 15 888 0 345

F : +31 15 888 0 445
E : hugo.van.der.kooij@qsight.nl
I : http://www.qsight.nl

Arnhem - Delft - Veldhoven



[Attachment #3 (message/rfc822)]


[Attachment #5 (multipart/alternative)]


Dennis,



It looks to me the Round Trip on the branch office is higher on average.

Which is no surprise in itself.



And as the blog indicated small issues stack up rapidly to noticeable delays.



Met vriendelijke groet / With kind regards,

Hugo



Van: Wireshark-users [mailto:wireshark-users-bounces@wireshark.org] Namens 
Dennis Schneck
Verzonden: Tuesday, 29 August, 2017 10:45
Aan: wireshark-users@wireshark.org
Onderwerp: [Wireshark-users] Fw: Re: How to find the bottleneck?





Hello Anne, Hello Hugo,

I tryed to get some statistics ( smb2, RTT, data usage ).





Gesendet: Montag, 28. August 2017 um 17:35 Uhr
Von: "Anne Blankert" <anne.blankert@geodan.nl <mailto:anne.blankert@geodan.nl> 
 >
An: "Community support list for Wireshark" <wireshark-users@wireshark.org 
<mailto:wireshark-users@wireshark.org> >
Betreff: Re: [Wireshark-users] How to find the bottleneck?

* Are you sure the branch has a 1 GB/s connection to HQ? 1GB/s possible, but 
quite good for current standards.

* The network is as slow as the slowest link. Are you sure that the slowest 
link between the branch client and HQ server is 1GB/sec? If traffic is routed 
over public internet between branch and HQ, there are likely some bottlenecks 
beyond your control

* Is there network latency between branch and headquarters? Even on high 
bandwidth connections, network latency can cause low data transfer rates 
because some protocols are very chatty: the next packet is sent only after 
receiving acknowledgment for the previous packet. With high latency networks, 
this may result in sometimes very poor transfer speeds







2017-08-28 14:37 GMT+02:00 Dennis Schneck <dennisschneck@web.de 
<mailto:dennisschneck@web.de> >:


Hello,
the following scenario


headquarter:  Server (AIX) and client (Windows)

branch: client (Windows)




If the Clients from the branch open a project from the server in the 
headquarter
it takes about 5 times longer than the same project open in headquarters.
The bandwith from the branch is 1 GB/s for the hole company.
So OK it takes longer in the branch but 5 times.

The Data is on the Storage System.


How to find the bottleneck in the network ?
The networkadmin is sure all is fine.



made a IO Graph from "tcp.seq" from one of some sample Data I got from the 
Users



SPW = BAD = branch

SPG = GOOD = headquarter


Thanks
Dennis








___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org 
<mailto:wireshark-users@wireshark.org> >
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@wireshark.org 
<mailto:wireshark-users-request@wireshark.org> ?subject=unsubscribe

___________________________________________________________________________ 
Sent via: Wireshark-users mailing list Archives: 
https://www.wireshark.org/lists/wireshark-users Unsubscribe: 
https://www.wireshark.org/mailman/options/wireshark-users 
mailto:wireshark-users-request@wireshark.org?subject=unsubscribe


[Attachment #8 (text/html)]

<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type \
content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 \
(filtered medium)"><style><!-- /* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Verdana;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.hoenzb
	{mso-style-name:hoenzb;}
span.E-mailStijl18
	{mso-style-type:personal-reply;
	font-family:"Arial",sans-serif;
	font-variant:normal !important;
	color:#1E4EB8;
	text-transform:none;
	text-decoration:none none;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=NL link=blue vlink=purple><div \
class=WordSection1><p class=MsoNormal><span \
style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1E4EB8;mso-fareast-language:EN-US'>Dennis,<o:p></o:p></span></p><p \
class=MsoNormal><span \
style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1E4EB8;mso-fareast-language:EN-US'><o:p>&nbsp;</o:p></span></p><p \
class=MsoNormal><span lang=EN-US \
style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1E4EB8;mso-fareast-language:EN-US'>It \
looks to me the Round Trip on the branch office is higher on \
average.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US \
style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1E4EB8;mso-fareast-language:EN-US'>Which \
is no surprise in itself.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US \
style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1E4EB8;mso-fareast-language:EN-US'><o:p>&nbsp;</o:p></span></p><p \
class=MsoNormal><span lang=EN-US \
style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1E4EB8;mso-fareast-language:EN-US'>And \
as the blog indicated small issues stack up rapidly to noticeable \
delays.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US \
style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1E4EB8;mso-fareast-language:EN-US'><o:p>&nbsp;</o:p></span></p><div><p \
class=MsoNormal><span \
style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1E4EB8'>Met \
vriendelijke groet / With kind regards,<o:p></o:p></span></p><p class=MsoNormal><span \
style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1E4EB8'>Hugo<o:p></o:p></span></p></div><p \
class=MsoNormal><span \
style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1E4EB8;mso-fareast-language:EN-US'><o:p>&nbsp;</o:p></span></p><div><div \
style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p \
class=MsoNormal><b><span \
style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Van:</span></b><span \
style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Wireshark-users \
[mailto:wireshark-users-bounces@wireshark.org] <b>Namens </b>Dennis \
Schneck<br><b>Verzonden:</b> Tuesday, 29 August, 2017 10:45<br><b>Aan:</b> \
wireshark-users@wireshark.org<br><b>Onderwerp:</b> [Wireshark-users] Fw: Re: How to \
find the bottleneck?<o:p></o:p></span></p></div></div><p \
class=MsoNormal><o:p>&nbsp;</o:p></p><div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div><div><p \
class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana",sans-serif'>Hello \
Anne, Hello Hugo,<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>I tryed to get some \
statistics ( smb2, RTT, data usage ).<o:p></o:p></span></p></div><div><p \
class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp; \
<o:p></o:p></span></p><div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp; \
<o:p></o:p></span></p><div style='border:none;border-left:solid #C3D9E5 \
1.5pt;padding:0in 0in 0in \
8.0pt;margin-left:7.5pt;margin-top:7.5pt;margin-right:3.75pt;margin-bottom:3.75pt'><div \
style='margin-bottom:7.5pt'><p class=MsoNormal><b><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>Gesendet:</span></b><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;Montag, 28. August \
2017 um 17:35 Uhr<br><b>Von:</b>&nbsp;&quot;Anne Blankert&quot; &lt;<a \
href="mailto:anne.blankert@geodan.nl">anne.blankert@geodan.nl</a>&gt;<br><b>An:</b>&nbsp;&quot;Community \
support list for Wireshark&quot; &lt;<a \
href="mailto:wireshark-users@wireshark.org">wireshark-users@wireshark.org</a>&gt;<br><b>Betreff:</b>&nbsp;Re: \
[Wireshark-users] How to find the bottleneck?<o:p></o:p></span></p></div><div><div><p \
class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana",sans-serif'>* Are \
you sure the branch has a 1 GB/s connection to HQ? 1GB/s possible, but quite good for \
current standards. <o:p></o:p></span></p><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>* The network is as slow as \
the slowest link. Are you sure that the slowest link between the branch client and HQ \
server is 1GB/sec? If traffic is routed over public internet between branch and HQ, \
there are likely some bottlenecks beyond your control <o:p></o:p></span></p><div><p \
class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana",sans-serif'>* Is \
there network latency between branch and headquarters? Even on high bandwidth \
connections, network latency can cause low data transfer rates because some protocols \
are very chatty: the next packet is sent only after receiving acknowledgment&nbsp;for \
the previous packet. With high latency networks, this may result&nbsp;in sometimes \
very poor transfer speeds<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div><div><p \
class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div></div></div><div><p \
class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp; \
<o:p></o:p></span></p><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>2017-08-28 14:37 GMT+02:00 \
Dennis Schneck &lt;<a href="mailto:dennisschneck@web.de" \
target="_blank">dennisschneck@web.de</a>&gt;: <o:p></o:p></span></p><blockquote \
style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in \
6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><div><div><p \
class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'><br>Hello,<br>the following \
scenario<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'><br>headquarter:&nbsp; \
Server (AIX) and client (Windows)<o:p></o:p></span></p></div><div><p \
class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>branch: client \
(Windows)<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div><div><p \
class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana",sans-serif'><br>If \
the Clients from the branch open a project from the server in the headquarter<br>it \
takes about 5 times longer than the same project open in headquarters.<br>The \
bandwith from the branch is 1 GB/s for the hole company.<br>So OK it takes longer in \
the branch but 5 times.<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>The Data is on the Storage \
System.<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'><br>How to find the \
bottleneck in the network ?<br>The networkadmin is sure all is \
fine.<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div><div><p \
class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana",sans-serif'>made a \
IO Graph from &quot;tcp.seq&quot; from one of some sample Data I got from the \
Users<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div><div><p \
class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana",sans-serif'>SPW = \
BAD = branch<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>SPG = GOOD = \
headquarter<o:p></o:p></span></p></div><div><p class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'><br>Thanks<br><span \
class=hoenzb><span style='color:#888888'>Dennis</span></span><o:p></o:p></span></p></div><div><p \
class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div><div><p \
class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div></div><div><p \
class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>&nbsp;<o:p></o:p></span></p></div></div></div><p \
class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'><br>___________________________________________________________________________<br>Sent \
via:&nbsp; &nbsp; Wireshark-users mailing list &lt;<a \
href="mailto:wireshark-users@wireshark.org" \
target="_blank">wireshark-users@wireshark.org</a>&gt;<br>Archives:&nbsp; &nbsp; <a \
href="https://www.wireshark.org/lists/wireshark-users" \
target="_blank">https://www.wireshark.org/lists/wireshark-users</a><br>Unsubscribe: \
<a href="https://www.wireshark.org/mailman/options/wireshark-users" \
target="_blank">https://www.wireshark.org/mailman/options/wireshark-users</a><br>&nbsp; \
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;mailto:<a \
href="mailto:wireshark-users-request@wireshark.org" \
target="_blank">wireshark-users-request@wireshark.org</a>?subject=unsubscribe<o:p></o:p></span></p></blockquote></div></div><p \
class=MsoNormal><span \
style='font-size:9.0pt;font-family:"Verdana",sans-serif'>___________________________________________________________________________ \
Sent via: Wireshark-users mailing list Archives: <a \
href="https://www.wireshark.org/lists/wireshark-users" \
target="_blank">https://www.wireshark.org/lists/wireshark-users</a> Unsubscribe: <a \
href="https://www.wireshark.org/mailman/options/wireshark-users" \
target="_blank">https://www.wireshark.org/mailman/options/wireshark-users</a> <a \
href="mailto:wireshark-users-request@wireshark.org?subject=unsubscribe">mailto:wiresha \
rk-users-request@wireshark.org?subject=unsubscribe</a><o:p></o:p></span></p></div></div></div></div></div></div></div></body></html>



["smime.p7s" (application/pkcs7-signature)]
[Attachment #10 (text/plain)]

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@wireshark.org?subject=unsubscribe

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic