This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Slow application performance - Application or network issue?

Dear Wireshark-Folks,

due to the fact that I am not too experienced with wireshark, I would appreciate for some advice whats going on with the following capture:

https://www.cloudshark.org/captures/a4fb6e2c187b

Capture was performed on client PC (172.24.112.145)
A custom application is running on this computer, but the behaivor is quite slow.
This application does database queries, starts transfering files, ... with different servers . You see it inside the capture.
Malformed packets are, because the capture was anonymized with Tracewrangler. So, data after Layer4 has been removed, but that should do the trick.

The question is if network/application problem and which application server or the client itself?

Thank you so much.

slow

asked 23 Sep '15, 00:24

dark_scorp
6●1●1●3
accept rate: 0%

edited 23 Sep '15, 00:33

From capture it looks that slowness is from 172.24.112.245(App),on this server delayed ack is enabled(200ms) and after each empty ack App server is taking approx 800ms to send new data.you should ask your app programmer about this pattern.

(23 Sep '15, 09:45) kishan pandey

The 800ms delay is from your client, probably building its SQL query.

As Kishan said, Delayed ACK is on, but as you are doing DB Queries, this is USUALLY a good thing. You could drop it to 100 if you are really worried. But turning it off may flood little packets everywhere.

Network is fast'ish with(6-7ms). Server OS/SQL is fast (pretty much instant). But the client is causing delays of 800 or 200 ms all the time. And they add up. Between Packets 187 and 250 of stream 6 you have already 6 seconds, of which around 75% is spent waiting on the app to do whatever it is doing.

(24 Sep '15, 02:28) DarrenWright

Thank you for your replies! So I will check the application running localy on the workstation.

(24 Sep '15, 02:31) dark_scorp