This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello Experts. My Windows File server is so slow and it is Virtualized on Vmware ESXi 5.5. I capture some packets via Wireshark and it show me "Ip Checksum offload". How can I solve it?link text

link text

I attached two photos and I'm thankful if you help me.

Thank you.

asked 09 May '15, 07:42

hack3rcon's gravatar image

hack3rcon
11778
accept rate: 0%


You really should not solve this!

Because Wireshark told you something different.

Wireshark has seen a wrong IP Checksum (0x0000) and not (0x6460). So far so good. But the main cause for this behaviour is the feature Checksum offload and this fact is Wireshark telling you.

With this feature enabled network interface makes the checksum calculations and not the CPU. So if the checksum calculation is donne in the interface, Wireshark has no chance to see the Checksums.

My recommendation for your analysis is to disable the coloring rule with (fcs_bad).

And this has nothing to do with your slow connections. The root cause of your slow connection problem is a different. But this root cause I really canĀ“t tell you with nothing more than this screenshots.

If you want further assistance you should upload a trace on cloudshark.

permanent link

answered 14 May '15, 15:50

Christian_R's gravatar image

Christian_R
1.8k2625
accept rate: 16%

edited 14 May '15, 15:52

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×36
×7

question asked: 09 May '15, 07:42

question was seen: 2,343 times

last updated: 14 May '15, 15:52

p​o​w​e​r​e​d by O​S​Q​A