This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

What is the common cause for an improved network after loading Wireshark?

0

Please help me understand the common cause between a loaded instance of Wireshark and improved network performance.

I had poor problems with the network in our house so after investigating the network I used Wireshark to peek around. The problem was most evident when I played an MMORPG Final Fantasy 14 but after loading it with an instance of Wireshark (and capturing data) in the background my load time dropped to 30 seconds from the usual 6+ minutes. Another PC in the had the same issues. After loading Wireshark the load times improved by the same magnitude.

The following day I loaded the game on the first PC without Wireshark and it took 6 minutes to load. After loading wireshark (without capturing data) the load time dropped to 30 seconds. The next day the load times were 30 seconds without having to load Wireshark.

The quality of our streaming video has greatly improved and web pages seem more responsive. There is a correlation that exists that I am unable to ignore. I understand that Wireshark doesn't do anything that would cause this. I only know enough about networks to put them together and get them to work, and do some simple troubleshooting.

About the home network: It's a home network in a fairly large house. We have a DLink DIR 655 bridged to a 2Wire 2701 HG-B, and are 30 meters apart. We had problems with online games, streaming video, and even had terrible load times with web pages and it wasn't unusual for the browser to return timeout messages.

asked 13 Feb '11, 14:07

Bugpop's gravatar image

Bugpop
1111
accept rate: 0%


One Answer:

1

As you already said yourself, Wireshark doesn't do anything that would cause significantly better or worse load times. It is just a tool to observe what is happening on the network, not a tweaking or tuning tool. I guess the improved loading times are most certainly caused by the fact that the required data was already in the disk or memory caches, so the second time loading the game will be faster.

You could use Wireshark to determine the difference in network communication between the slow and fast tries, but for that you need to be good enough to tell what network packets are doing what. Especially in non-plain-text and/or undocumented protocols this is pretty difficult to do. Mostly you can try to determine how many connections were made while loading the game, how long they took from SYN to FIN/RST, and how much data was transfered. For that, the statistics tools can be off great help, especially the "Conversations" statistics. They will show you what communications where taking place and how long they took with which kind of data rate. Maybe you can spot a difference between fast and slow tries, but I still guess it's faster the 2nd time because of local caching.

Generally, trouble with Wireless over distances more than a few meters (and especially with walls in the way) is pretty common. The best option to get around those is to give the devices a clear line of sight and get them close together. If you can't do that, maybe a directional antenna with higher transmission power might help.

answered 13 Feb '11, 16:20

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%