Hi, I need help to find if there is any missing HTTP response (Http 401 status code) from IIS server for the HTTP requests received from NLB probes. This way we can diagnose whether the issue is with NLB or IIS? The problem faced by us is that at certain time NLB is down because it does not receive the response but at the same time we are able to browse the site in IIS. So if we know missing packets or missing responses we can figure out where the problem is. Also is there any way in Wireshark to figure out packet loss? Regards Rajaniesh asked 16 Feb '17, 09:50  rajaniesh |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
Yes, Wireshark can help to figure out if there is packet loss.
However if you call NLB or IIS into question it would help to take a capture of the traffic with a port mirror or a TAP.
How do we do port mirror or TAP?
see https://blog.packet-foo.com/2016/11/the-network-capture-playbook-part-4-span-port-in-depth/ and https://blog.packet-foo.com/2016/12/the-network-capture-playbook-part-5-network-tap-basics/