Simple funny case about how we needed to set up remote access to locked IP camera 😄
packettrain.net/2019/06/04/5…
Some cool details about IP fragmenting. Although the feature is rarely used, but an analyst has to be prepared to interpret everything :)
This Post is from an account that no longer exists. Learn more
Vladimir retweeted
Zoomed-out we see a repeating pattern of slow in-flight ramp up with rapidly increasing RTTs because of a queue at the slow WAN interface. When the queue fills (usually ~100KB but sometimes less) we get losses and SACK/retrans recovery. Repeat pattern. Server RWIN never filled.
Vladimir retweeted
Here's a great 1Mbps egress queue example. Bottom part shows in-flight data ramping up with red "ticks" showing that losses always began at ~100KB. Black squares are individual measured RTTs. They neatly increase as queue time is added, flattening when the queue is full.
Can you guess what's happening on the screenshot? Note: link parameters are stable and don't change with time! Preparing to my "To send or not to send" talk on #sf18eu where I'll explain this example.
Why would a manufacturer do this? Strange. Has been found during baselining. It's working without any problems. Autoneg 1Gigabit FDX. STP padding is ok, all zeros. Would it be causing a problem - good luck troubleshooting it without #wireshark 😀
Just found one more PoE switch of this model, with same FW version - observed the issue again, with exactly same padding! Looks like this is not faulty device, but a bug in Firmware. Interesting experience. @hansangb @Packet_vlad @chrisjmaynard @alagoutte @PacketJay @kvicchio
Have you ever seen such ICMP types? You can read some details here: tools.ietf.org/html/draft-si…
Vladimir retweeted
We just released a new #sf17eu movie made by @Packet_vlad that features attendee/sponsor/instructor interviews and is a great representation of what happens at the #SharkFest conference! View it here: youtu.be/WyIp_c5Rax4
This is very good illustration that in packet analysis losing attention for one second can draw the line between right and wrong. #sf17eu
Just looked at the only question I was wrong with in Packet Challenge at #SharkFest'17 Europe.. Oh really? I FORGOT to copy one of the IPs from ny draft to my answer sheet 😀 #sf17eu #Wireshark
My new little post: #Wireshark Hints: multiple columns in one
packettrain.net/2017/07/05/w…
Wireshark Hints: be aware of your current config!
packettrain.net/2017/06/08/w…
Vladimir retweeted
#Wireshark community, have created a profiles repository - kicked it off with some goodies - please share and add! ow.ly/KvJy309toQn
















