Spiro,

Yes that is exactly what Wireshark is good for, and for a beginner that is an excellent place to start. You will want to capture off of a mirrored/span port to begin with if possible. Running a live capture on the server could use up more resources, and potentially give you a false reading. If you have to capture on the server, you will need to run a simultaneous capture on an affected client as well.

Take a capture and pay attention to the timing between request and response from the server.

Ryan Zuidema

Hi, I'm a newbie to Wireshark :)

Our users on our Intranet are stating that their Web Application can get slow at times.  If we run Wireshark on the Web server can we use it to determine if the packets are being slowed down once they have gotten in the Web server (ie, slow database calls, etc.) versus outside of the Web server on the network?

Thanks,

spiroc