First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

My I/O Graph Window Doesn't Look Like Laura's

  • retag add tags

I was watching Laura Chappell's YouTube tutorial and under Statistics / IO Graphs, my window looks different. I am missing the 'Graph' and 'Filter' buttons.

https://www.youtube.com/watch?v=e_iS4...

I did some analysis work into the late hours last night and wanted to bar-chart the output if possible, but I have not clue how-to atm.

I wanted to illustrate TCP delays observed.

Problem begins at line No.104 (left side column) highlighted in BLUE - client sends a TCP ACK to the SQL server (10.66.66.66), having received a 'Response' message containing 43bytes (see TCP segment column). The client hears nothing back from the server and waits just under 30sec (i.e. session timeout value) before sending a TCP Keep-Alive "hey Mr Server, are we still talking" The server responds immediately with TCP Keep-Alive ACK, to say "Yes I am here, just waiting for application (i.e SQL) to prepare next piece of data (SQL batch) for sending back to you, so please wait" The server then decides to send a TCP Keep-Alive to the client almost immediately which is odd behavior since it is nowhere near a reasonable TCP timeout value (in seconds) Nonetheless, the client responds right away and awaits further communication to be received - see line No.294 The client waits (hanging) for another ~30 secs, nothing is received so it once again sends TCP Keep-Alive - see line No.445 The cycle continues in this way between the two end-points with no attempt by either side to terminate the conversation The findings point to a catastrophic defect at the application layer of the OSI model in the way this particular session was handled When comparing the 'working' captures and 'non-working' I noticed the ACK following the TLS exchange was opposite in terms of who end sent it. Notwithstanding, we see 'SQL batch' and 'response' so it would be reasonable to conclude the TLS handshake and setup succeeded.

ajaznawaz's avatar
1
ajaznawaz
asked 2022-05-07 14:07:24 +0000, updated 2022-05-07 14:07:51 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

The video is showing an old version of Wireshark and the UI has been improved, hence the "missing" buttons. The Wireshark User's Guide has help on the I/O Graph here.

grahamb's avatar
23.8k
grahamb
answered 2022-05-07 18:10:37 +0000
edit flag offensive 0 remove flag delete link

Comments

Feb 27, 2014 is rather a long time ago. Not sure which version was hot at that tme. But these video's are more about grasping concept and then apply them yourself.

hugo.vanderkooij's avatar hugo.vanderkooij (2022-05-09 07:40:30 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer