This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Can re-transmissions from a single ip identify the source of a problem?

0

WE have a very large enterprise application located in a data-center in Boston. Users are all over the State (WAN MPLS). In analyzing a WireSherk Trace at several clients, the source of all of the transmissions was a load balancer (software CISCO 6509) that front end three Apache servers that distribute the database request into a multi-tier environment. All the retransmission are indeed retransmissions from this one load balancer device. The retransmissions coming from this load-balancer represent about 1.5% of all the traffic in this capture.

alt text

asked 02 Oct '13, 14:44

Zoberist's gravatar image

Zoberist
0778
accept rate: 0%