Hi, I am new to Wireshark and not a network specialist, but I have a special question, and maybe Wireshark can help me with it. I have already read the documentation (partly), but I could not find an answer. So before spending hours I would like to ask a specialist. Maybe he or she knows right away. Here it is: I built up a direct communication between two PCs (Win 7) using power line adaptors. Now it will surely happen that the power line is loaded with noisy currents, and I want to find out how this influences communication quality. I thought about just displaying corrupted packets. Best would be an online display (graph, meter, or simply percentage number updated every n sec). Is that possible with Wireshark? If yes, please give me a short hint how to start. Thanks a lot, Martin asked 09 Sep '11, 03:31  Mr_M_from_R edited 11 Sep '11, 13:13  helloworld |
One Answer:
You might want to use the I/O Graph from the statistics menu for this. You can enter a filter like "tcp.analysis.lost_segment" in the filter line of Graph2, and enable it by clicking it's button. I usually use the style type "FBar" for those things, to show them as little blocks, and - if necessary - set the Y-Axxis to logarithmic. Keep in mind that you won't see corrupted packets because your network card will drop it before Wireshark even sees it. You'll only see lost packets because of it, and the according retransmissions. answered 10 Sep '11, 08:48  Jasper ♦♦ |
Hi Jasper,
thank you for your answer and please excuse my late reaction to it. I have installed wire shark and made some tests with it, also what you suggested. Til now there are only very few lost segments but the hard conditions are not yet tested. I would like to ask one more thing for my understanding:
As much as I read a packet is said to be lost if there is no acknowledge packet returned to the sender before the corresponding RTT timer runs out. Now my question is, how it can be detected that a segment is lost and then retansmitted when being on the receiver side. I also found a filter tcp.analysis.retransmission. Would this lead to the same results as tcp.analysis.lost_segment ??
Thank you for any help
Martin