This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

We have an internal business website. I have 2 packet captures, one 417 pkts, the other 581 pkts. They recorded packets for about 1-2 minutes of traffic, to 1 specific IP/Server only.

I am trying to see why the one with 417 packets FAILS to initiate http/java/page/forms And why the 581 packets WORKS to initiate the http/java/page/forms

Trying to ID the differences, learn why and how to resolve...TROUBLESHOOT the problem =)

Sorry, had to run...back now, more info follows here:

2 servers, 1 works fine, other not

The one that fails, about 70-80% of the time, user clicks on desktop shortcut to URL Its internal link, goes to this server which fails

They receive the initial page, provide user credentials and login - All is fine - this works all the time. Login is succesful.

NOW: Problem is when the next link is clicked, this is what fails about 70-80% of the time to load properly. It wont load, citing "forms" and failures most of the time.

The packet captures are both, 1 session that I captured that worked - another that failed.

Both I immediately logged out/off of and stopped recording.

Therefore, trying to learn how to distinguish the differences between the 2 captures. ID what is in one, thats not in the other. Why one capture, the session worked - the other, it failed.

Any helpers available? Any recommendations? Thanks!

asked 11 Apr '14, 17:29

JFL's gravatar image

JFL
1112
accept rate: 0%

edited 11 Apr '14, 17:46

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×53

question asked: 11 Apr '14, 17:29

question was seen: 1,047 times

last updated: 11 Apr '14, 17:46

p​o​w​e​r​e​d by O​S​Q​A