I'm wondering can somebody give me some pointers on troubleshooting steps when deal with an enterprise network that we can only span the traffic off a switch to a pc which has wireshark installed on it to troubleshoot a slow network that the clients are stating everything is slow? I have access to the router and switches on the network and not seeing any physical problems. These are 4megs, 8megs,10megs and 1gigs links. I tell the customer to call me when they have a problem but they never do. I know this is a broad question but the trace files are long so trying to get a game plan together. Thanks asked 02 Dec '15, 06:49  patrickwill |
One Answer:
I'd recommend to start from the people, not from the machines, by asking first the end users to show me what they deem "slow" and what they deem "fast", as this would also identify to you the particular service you should concentrate at when analysing the trace. Doing the analysis for that service may lead to identification of an issue in the network itself, meaning that "everything" would be fixed by fixing the network problem found, as well as to identification of the root cause of the slowness outside the network and as related to that service alone, meaning that "everything" in fact meant "the service I use most often". Because the slowness may come from insufficient performance of the workstations as well as from overbooked 4 meg links (depending on the volume of data which the client's applications exchange with central servers) as well as overload of the servers to which the workstations connect. answered 02 Dec '15, 07:25  sindy |
