HakTip 136 – Wireshark 101: Understanding High Latency

Today on HakTip, Shannon explains high and low latency, and how to determine which machine is causing the latency via Wireshark.

Download HD | Download MP4

We have discussed high latency a bit in my previous HakTip, but I wanted to go into it with some more detail. As you look at packets in a Wireshark capture, you’ll notice that with a normal connection, your transmission happens in under a second.
Now if you look at a few packets with slow communication, they show up to be almost a second each. This would be called wire latency because of the slowness happening on the wire, not the source or destination.
Now what if the slow one happens to be the HTTP get request? In this case the only latency is happening from the client, so there must be an issue on the clients machine.
Lastly, if the slow packet happens to be from the server as an HTTP packet, we know HTTP has to go through the application layer and it takes some processing… the server must be having an issue with processing that packet.
Next up is a network baseline. Knowing what your network baseline is is important in figuring out network issues. A baseline is an understanding of what kind of latency your network usually runs at, and what you should normally expect.
If you need a site baseline, you’d probably want to record normal protocols in use, broadcast traffic, authentication sequences, and data-transfer rates. For a host baseline, record the protocols, idle and busy traffic and times, startups and shutdowns, authentication sequences, and associations and dependencies. For an application baseline, you’d want to pay attention to protocols, startup and shutdown procedures, associations and dependencies, and data-transfer rates. Depending on how busy your network might become (i.e. a bank has busiest hours during lunch time, and it dies off in late morning or when they are closed) you might want to make several baselines for different times of day. Keep your baseline secure, and make your own .pcap files of each.
Let me know what you think. Send me a comment below or email us at [email protected] And be sure to check out our sister show, Hak5 for more great stuff just like this. I’ll be there, reminding you to trust your technolust.

  • Green coffee Diet
    Reply

    First of all I want to say terrific blog! I had a quick question that I’d like to ask if you don’t mind.
    I was curious to know how you center yourself and clear your head before writing.
    I’ve had a hard time clearing my mind in getting my ideas out there.

    I truly do enjoy writing however it just seems like the first 10 to
    15 minutes are generally lost simply just trying to figure out how to begin. Any ideas or
    hints? Thanks!

  • online web cash review
    Reply

    Nice post. I used to be checking continuously
    this blog and I am impressed! Very helpful information specifically the remaining
    part 🙂 I handle such info a lot. I was looking for this certain information for a very long time.
    Thank you and good luck.

  • Colon Health Diet
    Reply

    I truly love your site.. Excellent colors & theme.
    Did you create this website yourself? Please reply back as I’m planning to create my very own website and would
    like to find out where you got this from or just what the
    theme is named. Thank you!

  • Gain Muscle
    Reply

    Hi there! I just wanted to ask if you ever have any issues with hackers?
    My last blog (wordpress) was hacked and I ended up losing
    months of hard work due to no data backup.
    Do you have any solutions to protect against hackers?

  • natural max garcinia
    Reply

    Right here is the right website for everyone who hopes to find
    out about this topic. You realize a whole lot its almost tough to argue with you (not that I actually will need to…HaHa).
    You definitely put a fresh spin on a topic that has been written about for
    many years. Wonderful stuff, just great!

  • mexican restaurants near me
    Reply

    Someone necessarily lend a hand to make severely articles I might state.
    That is the very first time I frequented
    your website page and to this point? I amazed with the research you made to create
    this particular submit incredible. Excellent task!

  • https://alpha.app.net/moveinnestates
    Reply

    You will find a lot of hostels in Berlin to choose
    from at very low prices. William Latane Montague was born about 20 Aug 1824 in Buckingham County, Virginia, the son of Henry Brown Montague
    and his wife Mary Anne Moody. ‘Once we get these derelict buildings renovated and repositioned,
    I think it really helps the image, improves the vibe,’ he said.

  • sfd
    Reply

    You can get an level of $100 to $1500 through these financing options sfd home buyers may find the changes in insurance
    premiums for mortgages could possibly work with their
    advantage particularly if they prefer to refinance fha
    loan within the future.

  • facebook log in yahoo mail
    Reply

    Enter your real first and last name, your email and your password strength.
    Click link presents itself the page to alter your view from “Top News” to “Most Recent,” so you’ll be able to clearly
    see the very last few times an associate has liked a website or you’ve received notification of her activities on Facebook.

  • CedrickTSier
    Reply

    Good day! This is my first comment here so I just wanted to
    give a quick shout out and tell you I truly enjoy reading through your posts.
    Can you suggest any other blogs/websites/forums that cover the same topics?
    Thanks for your time!

  • BernardBus
    Reply

    Cash loan in London UK has slight differences with payday cash advances within the US BernardBus talk in your doctor in order to find out if there are sliding
    scale options for your costs.

  • the cheapest auto insurance in florida
    Reply

    With the vacations approaching, this is a
    great duration of year to generate some quick currency for little or no money
    invested the cheapest auto insurance in florida in other situations, you could possibly be motivated to deliver a
    cosigner to appear in and act as your guarantor.

  • login to hotmail
    Reply

    Microsoft has dropped the Hotmail brand since quite an extended time, coupled
    with then rebranded it with all the Windows Live Mail.
    ” Wie genau der Konzern diese unerwnschten Dateien findet, konnte die deutsche Microsoft-Pressestelle zunchst nicht klren.

  • Hye Slowe
    Reply

    Solar City Military Project A Go, Even After Losing Federal Loan Hye Slowe
    obviously, by having an offer prefer that, you can bet that lawsuit money advance companies make sure they just offer an advance to people by having an good potential for winning.

  • Rick Jubert
    Reply

    People in worse financial situations are available higher rates because the lender has taken a larger risk in lending for
    you whatsoever Rick Jubert this way it is possible to truly explore all the various
    choices and benefits available for you personally.

  • pandora uk
    Reply

    Greetings. I want to start by telling you the author’s name – Melvin Rieth.

    Debt collecting is her profession for repeatedly she’ll be promoted shortly after that.
    Wyoming has always been his living venue. The thing I adore most cycling nevertheless
    can’t permit it to be my profession really. See what’s new on my website
    here: pandora uk

  • Lean Fast Garcinia cmabogia
    Reply

    I know this if off topic but I’m looking into starting my own blog and was curious what all
    is required to get setup? I’m assuming having a blog like yours would cost a
    pretty penny? I’m not very web savvy so I’m not 100%
    certain. Any recommendations or advice would be greatly appreciated.

    Kudos

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>