Recommended Posts

Im with Circaflex here - see half of what I was paying for would be call to isp... Unacceptable!!!  Even if was prime time...  One test ok - but if best you could get is half of what your paying for.. I would be on the phone with them.. Your not paying for 50, your paying for 100.. 90% of that ok sure.. But 50 - no sorry something is wrong!

  • Like 2

@BudManI looked at this guide supplied by Circaflex: http://www.linuxandubuntu.com/home/how-to-use-wireshark-to-inspect-network-traffic

 

And I added the group permissions, but it still says:

 

Couldn't run /usr/bin/dumpcap in child process: Permission denied

 

When I ran it as root:

 

Lua: Error during loading:
 [string "/usr/share/wireshark/init.lua"]:44: dofile has been disabled due to running Wireshark as superuser. See https://wiki.wireshark.org/CaptureSetup/CapturePrivileges for help in running Wireshark as an unprivileged user.

Edit: OK, it seems to work now...

 

Edit2: What information am I looking for?

  On 22/12/2017 at 21:06, Mindovermaster said:

@CircaflexSometimes, it is slower, some days it is higher. Know anything about fluctuation? And that was only ONE scan to ONE server. I just did it once to prove a point.

Expand  

Dude don’t bite the hand that feeds you. He is trying to help you out. Denial is just going to hinder progress. 

  On 22/12/2017 at 21:38, adrynalyne said:

Dude don’t bite the hand that feeds you. He is trying to help you out. Denial is just going to hinder progress. 

Expand  

you see my last to 2nd post?

  On 22/12/2017 at 21:40, Mindovermaster said:

you see my last to 2nd post?

Expand  

Yes but I’m also talking about your general attitude towards people trying to help you. One of the best some ways to turn people away from you is ask for help and then proceed to tell them how wrong they are.

  On 22/12/2017 at 21:42, adrynalyne said:

Yes but I’m also talking about your general attitude towards people trying to help you. One of the best some ways to turn people away from you is ask for help and then proceed to tell them how wrong they are.

Expand  

Hard to do that when you are half-arsed... :rofl:

 

But, anyway, to my last question, what am I looking for in Wireshark?

 

Edit: OK Budman.

Not going to be able to explain it to you ;) your going to have to post it so I can look..   PM it to me if you don't want to put it up for public consumption.

 

Do you really want to get into what tcp retrans is and looking for response time to your syn.. ie how long it takes for the syn,ack to come back, etc. etc.  Could write a book on looking at sniffs for what is wrong ;)

Here's one, this was on going to Gmail. it, again, was just sitting there for a few seconds. Then it went on its merry way.

 

I ran Wireshark, then immediately stopped it after it was fully loaded:

 

http://www.mediafire.com/file/mm5i15m84g9c6io/gmail.pcapng

 

Edit: You've helped me enough, BudMan. ;)

Ok first thing that jumped out at me is this...

 

whoisthisIP.thumb.png.9c6a02e5dcb47bfff04388c0103a3974.png

 

What is this.. Its crap traffic...  IP is owned by

 

NetRange:       104.193.176.0 - 104.193.183.255
CIDR:           104.193.176.0/21
NetName:        MCPROHOSTING

 

Its the largest conversation in your sniff at over 5800 packets...  Running ###### like that in the background sure not going to help..

  On 22/12/2017 at 22:08, BudMan said:

Ok first thing that jumped out at me is this...

 

<snip>

 

What is this.. Its crap traffic...  IP is owned by

 

NetRange:       104.193.176.0 - 104.193.183.255
CIDR:           104.193.176.0/21
NetName:        MCPROHOSTING

 

Its the largest conversation in your sniff at over 5800 packets...  Running ###### like that in the background sure not going to help..

Expand  

I had minecraft running, sorry about that. Forgot I had it on. The "MCPROHOSTING" server is in Toronto, Canada.

 

Let me run another sniff with it off..

I don't see anything going on in the sniff that points to problems - response to syn, very quick..

 

opentogmail.thumb.png.a2b336bc9379ee55becde38098bd4efe.png

 

Other than the ###### ton of that other conversation.. There is nothing that jumps out as wrong.  Your dns queries are quick.. there are not retrans - so no lost packets, etc.

  On 22/12/2017 at 22:21, Mindovermaster said:

Have any idea what the culprit could be? Bad cable? Bad Eth0 port? Bad Router? Bad modem? Bad ISP?

Expand  

Do some trial and error.

 

By cable, are you referring to the ethernet cable you use to directly connect, or are you talking the actual coax from TWC? If you are referring to the ethernet cable, I would find that unlikely, considering your father has the same issues on another device.

 

Bad Eth0 port, doubtful, see previous reply.

 

Bad router - possible, one way to be sure would be remove it from the equation. Hardware directly to the cable modem and browse as usual. If the issue goes away, probably the router. If the issue still persists, could be the modem but you might want to call your ISP and have them do a line test.

  On 22/12/2017 at 22:47, Circaflex said:

Do some trial and error.

 

By cable, are you referring to the ethernet cable you use to directly connect, or are you talking the actual coax from TWC? If you are referring to the ethernet cable, I would find that unlikely, considering your father has the same issues on another device.

 

Bad Eth0 port, doubtful, see previous reply.

 

Bad router - possible, one way to be sure would be remove it from the equation. Hardware directly to the cable modem and browse as usual. If the issue goes away, probably the router. If the issue still persists, could be the modem but you might want to call your ISP and have them do a line test.

Expand  

The Ethernet, yeah.

 

I'll try connected just to modem tonight, after she goes to bed, so my Mom doesn't go screaming that the wireless Internet doesn't work...

Very Very Very weird...

 

I just now switched ports on our router. 3 to 4. And it's back up to where I was normal. Just... weird? I had Ethernet ports on routers go out on me before...

 

The apocalypse all over again? :cry:

so your saying its normal now.. From your 2nd sniff I saw not real issue that could explain your problem.. There were a few what looked like dupe acks.. But there was nothing to suggest a problem with the ethernet connection.  Such a problem would be clearly obvious in lots and lots of retrans, etc.

  On 23/12/2017 at 13:46, BudMan said:

so your saying its normal now.. From your 2nd sniff I saw not real issue that could explain your problem.. There were a few what looked like dupe acks.. But there was nothing to suggest a problem with the ethernet connection.  Such a problem would be clearly obvious in lots and lots of retrans, etc.

Expand  

Yeah, I asked a friend, and he says some acks are acting up, too. But that should not slow me down by any means. So we are double sure now. :)

 

It's not "normal", but it is a lot faster than it was...

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.