This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

outlook issues

0

https://www.cloudshark.org/captures/5c7260923ba4 I have some users at a remote site connection to an exchange server, the users are complaining that Outlooks locks up at times requiring them to reboot and it takes and it takes a very long time to open.

In the trace, I am seeing very long Delta time between the server and the client as they attempt to communicate with each, I am not sure if it is the server responding or the Client, can someone who know much more the me about packet analysis review this trace an let me know what could be the issue Please

Thanks

asked 09 Feb '14, 14:22

ejohnson7's gravatar image

ejohnson7
11●9●9●12
accept rate: 0%

One Answer:

1

The analysis of the capture file does not show any real network problems (only a few DUP ACK, etc.).

However, there are some RPC calls that take pretty long.

alt text

But, after (and during) those RPC calls, the communication continues with pretty good response times, so those long lasting RPC calls are (probably) not a good explanation for a complete lock up of Outlook.

I conclude:

  • there is either a local problem on the client that causes the lock up, like interfering software (AV, Firewall, Endpoint Security, Malware) or attempted (and failed) network connections you did not capture.
  • or, there is really a problem in the communication between client and server, but you did not capture that traffic and/or the moment when it took place
  • or, there is a problem with the server (like not answering the client at all) but you did not capture that either

Regards
Kurt

answered 10 Feb '14, 06:30

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

edited 10 Feb '14, 06:52

Thank you so much there is a lot of security on these laptops AV, DLP etc and that is causing many problems

(12 Feb '14, 22:03) ejohnson7

Thank you so much my friend

(27 Feb '14, 20:24) ejohnson7

Hint: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions.

(27 Feb '14, 23:09) Kurt Knochner ♦