This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I am new to Wireshark and not a network specialist, but I have a special question, and maybe Wireshark can help me with it. I have already read the documentation (partly), but I could not find an answer. So before spending hours I would like to ask a specialist. Maybe he or she knows right away. Here it is:

I built up a direct communication between two PCs (Win 7) using power line adaptors. Now it will surely happen that the power line is loaded with noisy currents, and I want to find out how this influences communication quality. I thought about just displaying corrupted packets. Best would be an online display (graph, meter, or simply percentage number updated every n sec).

Is that possible with Wireshark? If yes, please give me a short hint how to start.

Thanks a lot,

Martin

asked 09 Sep '11, 03:31

Mr_M_from_R's gravatar image

Mr_M_from_R
1333
accept rate: 0%

edited 11 Sep '11, 13:13

helloworld's gravatar image

helloworld
3.1k42041


You might want to use the I/O Graph from the statistics menu for this. You can enter a filter like "tcp.analysis.lost_segment" in the filter line of Graph2, and enable it by clicking it's button. I usually use the style type "FBar" for those things, to show them as little blocks, and - if necessary - set the Y-Axxis to logarithmic.

Keep in mind that you won't see corrupted packets because your network card will drop it before Wireshark even sees it. You'll only see lost packets because of it, and the according retransmissions.

permanent link

answered 10 Sep '11, 08:48

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Hi Jasper,

thank you for your answer and please excuse my late reaction to it. I have installed wire shark and made some tests with it, also what you suggested. Til now there are only very few lost segments but the hard conditions are not yet tested. I would like to ask one more thing for my understanding:

As much as I read a packet is said to be lost if there is no acknowledge packet returned to the sender before the corresponding RTT timer runs out. Now my question is, how it can be detected that a segment is lost and then retansmitted when being on the receiver side. I also found a filter tcp.analysis.retransmission. Would this lead to the same results as tcp.analysis.lost_segment ??

Thank you for any help

Martin

(19 Sep '11, 06:47) Mr_M_from_R
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×549
×254
×100

question asked: 09 Sep '11, 03:31

question was seen: 4,911 times

last updated: 19 Sep '11, 22:41

p​o​w​e​r​e​d by O​S​Q​A