Vladimir (@Packet_vlad) profile picture

Wireshark, Networking

Ukraine
Joined August 2013
Photo by Vladimir (@Packet_vlad)Photo by Vladimir (@Packet_vlad)Photo by Vladimir (@Packet_vlad)Photo by Vladimir (@Packet_vlad)Photo by Vladimir (@Packet_vlad)Photo by Vladimir (@Packet_vlad)Photo by Vladimir (@Packet_vlad)Photo by Vladimir (@Packet_vlad)Photo by Vladimir (@Packet_vlad)
Simple funny case about how we needed to set up remote access to locked IP camera 😄 packettrain.net/2019/06/04/5…
3
9
Some cool details about IP fragmenting. Although the feature is rarely used, but an analyst has to be prepared to interpret everything :)
This Post is from an account that no longer exists. Learn more
Zoomed-out we see a repeating pattern of slow in-flight ramp up with rapidly increasing RTTs because of a queue at the slow WAN interface. When the queue fills (usually ~100KB but sometimes less) we get losses and SACK/retrans recovery. Repeat pattern. Server RWIN never filled.
2
4
Here's a great 1Mbps egress queue example. Bottom part shows in-flight data ramping up with red "ticks" showing that losses always began at ~100KB. Black squares are individual measured RTTs. They neatly increase as queue time is added, flattening when the queue is full.
1
2
Traditional #SharkFest selfie with instructors performed by @packetpioneer 😀 #sf18eu
2
8
Can you guess what's happening on the screenshot? Note: link parameters are stable and don't change with time! Preparing to my "To send or not to send" talk on #sf18eu where I'll explain this example.
2
1
1
8
Why would a manufacturer do this? Strange. Has been found during baselining. It's working without any problems. Autoneg 1Gigabit FDX. STP padding is ok, all zeros. Would it be causing a problem - good luck troubleshooting it without #wireshark 😀
2
3
Just found one more PoE switch of this model, with same FW version - observed the issue again, with exactly same padding! Looks like this is not faulty device, but a bug in Firmware. Interesting experience. @hansangb @Packet_vlad @chrisjmaynard @alagoutte @PacketJay @kvicchio
2
4
Hi all, thanks for discussion an info! Submitted a bug to manufacturer. I'm in doubt they gonna fix it because the device is EOL, but anyway will keep you updated.
1
Have you ever seen such ICMP types? You can read some details here: tools.ietf.org/html/draft-si…
2
5
10
We just released a new #sf17eu movie made by @Packet_vlad that features attendee/sponsor/instructor interviews and is a great representation of what happens at the #SharkFest conference! View it here: youtu.be/WyIp_c5Rax4
1
3
8
This is very good illustration that in packet analysis losing attention for one second can draw the line between right and wrong. #sf17eu
1
3
Just looked at the only question I was wrong with in Packet Challenge at #SharkFest'17 Europe.. Oh really? I FORGOT to copy one of the IPs from ny draft to my answer sheet 😀 #sf17eu #Wireshark
1
6
#sharkfest #sf17eu Sharkfest Europe 2017 Welcome dinner
1
3
8
#sfeu17 Welcome dinner in Estoril, Portugal
6
My new little post: #Wireshark Hints: multiple columns in one packettrain.net/2017/07/05/w…
Wireshark Hints: be aware of your current config! packettrain.net/2017/06/08/w…
1
3
7
#Wireshark community, have created a profiles repository - kicked it off with some goodies - please share and add! ow.ly/KvJy309toQn
1
16
2
28