I'm working on a trace-file which has reported ISP throttling occurrences in it.
My task is
to use IO graph to understand at what point in time the throttling process effected client upload throughput. To achieve this I have applied 3 filters with results shown in UI attached.
Each blue line, when I see the graph it raising from its level both up and down using the Y axis which is set to byets/tick. Now, interesting this which should be very easy to find, like when I click on the line which lays low in graph and compare to green line which is higher in scale at the wireshark packets pane/window I'm confused as to what bytes (size) attribute to change in these lines positions on graph (IO)?
open wireshark-> generate traffic (e.g http)- > goto statistics-> I/O graph
click on any point in graph it takes you to packet (single) view, now on the packet informtion do you see anything e.g len,window size etc that tells why this packet was lower /higher on scale in graph w.r.t bytes /tick. Make sure Y-axis is set as bytes/tick.
Where I have to look in packet details to find this information. Thanks.
asked 17 Jun '15, 01:37
edited 18 Jun '15, 03:47
Packets 3134 & 3137 are at different positions in the graph as they fall into different tick intervals.
According to the bottom screenshot, you have a tick interval of 0.01 sec. Looking at the packet list, packets 3134, 3135 & 3136 all fall into the interval 14.12 - 14.12999999, packet 3137 ... fall into the tick interval 14.13 - 14.13999999.
answered 18 Jun '15, 05:29
edited 18 Jun '15, 05:55