Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Slow gigabit network

From: Scott Chapman <scottchapman@xxxxxxxxxxxxxx>
Date: Tue, 17 Mar 2009 15:36:01 -0500 (GMT-05:00)
I have checked all the obvious things (CPU is under utilized, and I have fiddled around with some of the driver settings that might be related like buffer sizes, and off loading and the like).

I am expecting to get a managed HP switch in a couple of days, so perhaps that could shed some light (or just fix it outright!).

-Scott


----- Original Message -----
From: "Hansang Bae" <hbae@xxxxxxxxxx>
To: wireshark-users@xxxxxxxxxxxxx
Cc: "Scott Chapman" <WireShark@xxxxxxxxxxxxxxxxx>, "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Sent: Tuesday, March 17, 2009 4:30:59 PM GMT -05:00 US/Canada Eastern
Subject: Re: [Wireshark-users] Slow gigabit network

At 11:09 AM 3/10/2009, Scott Chapman wrote:
>I have experimented with forcing 1000/full explicitly on both sides with out any effect.
>
>Incidentally, I do occasionally get 20MB/sec.
>
>Before I go buy anew switch I was hoping to learn how to use wireshark to see what is going on, perhaps to help point the finger somewhere...


Scott,
Divide and conquer.  I don't recall if you tried netperf or UDP based testing tools or not.  The slowness could be your NIC, it could be the protocol in use, or it could be the switch.  Does performance stats (like perfmon if using wintel) show that cpu is shooting high?  Do you have tcp off loading enabled?  Did you try disabling it?  Did you try applying the latest NIC drivers?  

Did you try using ports 1 and 2 (not 1 and 25)?  If the are right next to each other, did you try separating them (if on 1 and 2, move it to 1 and 13) to rule out ASIC based issues?  Have you monitored netstat or switch counters (if avail) for packet drops?

hsb