Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: RE: [Ethereal-users] Ethereal help

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Wed, 16 Apr 2003 15:08:23 +0100
Title: Message
Royce,
 
I think you missed the point of my previous email.  Ethereal is an indispensable network management tool but it is not a one-stop shop for network performance analysis. (It ranks second only to perl, in the order I install software on a new PC).
 
Start off by monitoring your servers, routers and switches using MRTG or whatever network monitoring system you prefer.
*    Understand which network devices are the biggest users.
*    Understand when traffic levels are high (and check to see if the problems disappear when traffic levels are not)
*    Understand whether performance problems are to do with errors, packet loss, congestion or (as always happens) is an application issue nothing to do with the network.
 
Once you have a fair idea of knowing *what* is wrong with your network (eg "My server is sending tons of broadcast messages"),  should you a use Ethereal to find out *why* things are going wrong. (eg My server is spamming ARP messages to get the MAC address of another server I removed from the network last week).
 
I like to think of Ethereal as a microscope, where as MRTG is more like a CCTV camera. A daily scan through the CCTV TV tells whether there's a need for forensic research using Ethereal (and Netflow/RMON2/ntop data too).
 
Cheers,
 
Alistair
-----Original Message-----
From: Royce L. Bragg [mailto:braggman@xxxxxxx]
Sent: 15 April 2003 15:36
To: Alistair.McGlinchy@xxxxxxxxxxxxxxxxxxxxx
Subject: Re: [Ethereal-users] Ethereal help

Hi Alistair,
 
I'm sorry for my generic question.  What I'm trying to correct is 4 segments on my network that are not performing up to snuff.  The users can still get their work done, but I know that the network is not performing well on these switches (Cabletron/Enterasys ELS10-27s) and I would like to find the problem and correct it.  We just upgraded from a T1 to an ATM with 3MB sustained up and down with 12MB burst and I would like all my users to be able to enjoy this added speed, but as I mentioned these segments are showing no additional speed improvements.  Of course, these were problem segments before the upgrade so the problem was never really the available bandwidth that we had available.  I appreciate your post and your time.  It looks like I just need to get ethereal up and running.
 
Royce
----- Original Message -----
Sent: Monday, April 14, 2003 4:50 PM
Subject: RE: [Ethereal-users] Ethereal help

Hi Royce,
 
I suspect your question wasn't quickly replied to as it was far too generic. 
 
Take a look at this post I made to a similar user a few months ago. Perhaps this will help.
 
 
 
Alistair
 
-----Original Message-----
From: Royce L. Bragg [mailto:braggman@xxxxxxx]
Sent: 11 April 2003 22:25
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Ethereal help

Hi,
 
I very new with the Ethereal product and I would like to know the best way to use it to find and eliminate bottlenecks in my Windows 2000 network.  I have 10 servers and over 1000 users.  Any help would be greatly appreciated. 
 
RLB


Registered Office:
Marks & Spencer p.l.c
Michael House, Baker Street,
London, W1U 8EP
Registered No. 214436 in England and Wales.

Telephone (020) 7935 4422
Facsimile (020) 7487 2670

www.marksandspencer.com

Please note that electronic mail may be monitored.

This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.

The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB.



Registered Office:
Marks & Spencer p.l.c
Michael House, Baker Street,
London, W1U 8EP
Registered No. 214436 in England and Wales.

Telephone (020) 7935 4422
Facsimile (020) 7487 2670

www.marksandspencer.com

Please note that electronic mail may be monitored.

This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.

The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB.