Top 5 Wireshark tricks to troubleshoot SLOW networks

Поділитися
Вставка
  • Опубліковано 27 гру 2024

КОМЕНТАРІ • 164

  • @davidbombal
    @davidbombal  10 місяців тому +12

    Big thank you to Proton for sponsoring this video. Get Proton VPN using my link: davidbombal.wiki/protonvpn2
    // Chris’ SOCIAL //
    LinkedIn: www.linkedin.com/in/cgreer/
    UA-cam: ua-cam.com/users/ChrisGreer
    X/Twitter: twitter.com/packetpioneer
    // GitHub Link to lab file //
    Packet Pioneer GitHub: github.com/packetpioneer/youtube/blob/main/Lab1-GreerBombal_ItsNotTheNetwork.pcapng
    // UA-cam videos REFERENCE //
    Wireshark Tutorial for beginners. Where to start with Wireshark: ua-cam.com/video/OU-A2EmVrKQ/v-deo.html
    // UA-cam PLAYLIST //
    Wireshark with Chris Greer: ua-cam.com/video/rmFX1V49K8U/v-deo.html&pp=iAQB
    // David SOCIAL //
    Discord: discord.com/invite/usKSyzb
    X: twitter.com/davidbombal
    Instagram: instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    UA-cam: www.youtube.com/@davidbombal
    // MY STUFF //
    www.amazon.com/shop/davidbombal
    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended.
    Thank you for supporting me and this channel!
    Disclaimer: This video is for educational purposes only.

  • @aliabbas48
    @aliabbas48 10 місяців тому +12

    29:10 I spent a lot of time earlier to understand that why I am getting huge value in segment length column although MTU is set 1500. Thank you Chris for going to different tangents; it helps a lot! Thank you David for bringing such valueable persons on your channel!

    • @ChrisGreer
      @ChrisGreer 9 місяців тому

      Yeah that is a tricky one!

  • @BrokenKanuck
    @BrokenKanuck 9 місяців тому +5

    Wasn't expecting to watch this end to end, - but damn, enthralled. Love this stuff!

  • @TomWhi
    @TomWhi 9 місяців тому +3

    Ironically talking about the slow passage of time between packets, but at the same time this video was over before I knew it! Fantastic explanation as always, and lovely to see you again as a guest, Chris.

    • @jaxytvids
      @jaxytvids 3 місяці тому

      When you think about it, there is great significance to the passage of time. And there is such great significance to the passage of time when we think about a day in the life of our packets.

  • @Mike.Kachar
    @Mike.Kachar 10 місяців тому +10

    I ❤ the videos you do with Chris Greer.
    The info he provides about Wireshark & what you're looking at + for within pcap's is something, I feel, today every network'er should know how to do & what to look for.
    👍👍👌

  • @jjdope92
    @jjdope92 9 місяців тому +11

    A very big thank you to both of you. You guys are literally changing the way I look into network issues and I am becoming better and better each day. Keep up the beyond-excellent work.

  • @apeironMEG
    @apeironMEG 9 місяців тому +2

    Hey Chris don't listen anybody and give us that details please. Those kind of knowledges are necessary when you try to give a logic to processes. Thank you David, awesome again. Appreciate it.

  • @ken_tx
    @ken_tx 10 місяців тому +5

    Chris is a great mentor. His knowledge, personality and demeanor lend himself to being great. Always enjoy his content, thanks for hosting him.

    • @ChrisGreer
      @ChrisGreer 10 місяців тому +1

      Thanks for the comment! I really enjoy coming on and chatting with david.

    • @Lovely_planet
      @Lovely_planet 10 місяців тому

      Couldn’t have said it better

  • @dingokidneys
    @dingokidneys 9 місяців тому +2

    These are always fascinating and as for the digressions, I'm OK with them because you always come back to the point you digressed from but have also imparted some breadth to the discussion. I could always jump ahead in any case if I found them unhelpful.

  • @zchantzis
    @zchantzis 10 місяців тому +14

    David & Chris you are opening our eyes 👀. Thank you 🙏

    • @davidbombal
      @davidbombal  10 місяців тому

      Happy to hear that! You're welcome!

  • @wadebrumbaugh7579
    @wadebrumbaugh7579 10 місяців тому +2

    I ❤ the detailed tangents. In this case (29 min mark), it helped me understand where in the process the capture actually happens and why they show larger than 1500. Keep the details coming.

  • @kovi17
    @kovi17 10 місяців тому +4

    No lies, the detailed tangents really help expand on the why of it for me. Great video guys!

    • @ChrisGreer
      @ChrisGreer 10 місяців тому +2

      Thanks for the feedback. I love getting to the point, but so much is lost when you do that.

    • @kovi17
      @kovi17 10 місяців тому +1

      @@ChrisGreer Absolutely! I’ve just started transitioning to an IT based career and earned the A+ certification and working on security+. Every time you expanded upon the point you were making it definitely helped me understand things better. Thanks for your content, and I absolutely subscribed to your channel!

  • @chrismoore1981
    @chrismoore1981 10 місяців тому +3

    Thanks Chris/David. Chris I love more detail than less detail when explaining different things.

  • @karanb2067
    @karanb2067 9 місяців тому +2

    I once used the skills Chris taught to analyze an LNK file attack, showed me how beautiful that attack was...

  • @Tech-wise-
    @Tech-wise- 10 місяців тому +1

    Thanks Chris Greer and David Bombal.
    Getting in detail is actually good as it further clears the concept of what is behind the stuff you're imparting.

  • @marvelousekpenyong4343
    @marvelousekpenyong4343 10 місяців тому +1

    great work David and Chris. I love your contents. I'm someone looking for breakthrough in Wireshark packet analysis. I feel Chris' channel is just the right place for me. Love from Nigeria. Keep up the good work. Thank you so much David. Looking forward to more sessions like this with you and chris

  • @jgl1563
    @jgl1563 10 місяців тому +2

    I watch lots of your videos David but damn!!... this has been one of my favorites by far.
    Please we need more content like this 🙏🏼🙏🏼🙏🏼

  • @johnblixt4740
    @johnblixt4740 9 місяців тому +1

    Love the details and tangents because it helps me understand more of the big picture. Awesome content and I'm going to get lost in your channel, Chris. Thanks both!

  • @Maxშემიწყალე
    @Maxშემიწყალე 9 місяців тому

    I bought this dudes Wireshark course on Udemy; very solid. Would recommend for anyone in IT to take it. Thank you David for having this dude on.

  • @KeithPawson
    @KeithPawson 9 місяців тому +1

    This is brilliant, I have another bookmarked video! Digressing is fine and works for me, Chris adds value to the subject when he does this. Even in 2024 the basic fundamentals of TCP are essential, just wish I had more time to spend in this area.

  • @vincentio1060
    @vincentio1060 8 місяців тому

    This channel is a goldmine for aspiring networking/cyber security professionals

  • @raymation3d
    @raymation3d 10 місяців тому +1

    Chris I love your side bars and detailed tangents little buddy absolute gold!

  • @BlaMM74
    @BlaMM74 10 місяців тому +1

    This is very timely, I'm dealing with network issues right now!

  • @breakingbisley
    @breakingbisley 8 місяців тому

    Great video! If you 're TSing issues regarding Window Size and Packet Loss (to double-check if the TCP window size is not getting slammed on the receiver, and on the very rare occasion vice versa). select under 'Statistics - TCP Stream Graphs - Window Scaling', this a good tool to measure and view the respective Window scaling between C/S and S/C. I think Chris made a video of it years ago! I hope this helps :)

  • @scottspa74
    @scottspa74 10 місяців тому

    I love when you have chris on. I bought tye course he did with wireshark and nmap, just havent had time to start it, yet. Busy with ccna study and tls study with Ed Harmoush. When chris goes 'on tangents' it's an excellent learning opportunity. Would gave liked a bit more on the relationship between segment size and window size in tcp. Would also like to see more about QUIC. Thanks.

  • @serxhioshani3862
    @serxhioshani3862 10 місяців тому +1

    Much appreciations guys! Patiently waiting for that SACK video

    • @ChrisGreer
      @ChrisGreer 9 місяців тому +1

      This is a great idea.

  • @secinject814
    @secinject814 10 місяців тому

    Good to hear an ad for a VPN that's really just about what it's main function is, which is
    encrypting traffic. You can build one at home with a raspberry pi if you can find one, you just wont have the geolocation hopping. It is just a good first line of defense against attacks, as letting people know your IP can let them possibly wreak havoc on your device.

  • @rap1z
    @rap1z 10 місяців тому

    I love chris, hes always trying to just teach us stuff but like actually without peddling shitloads of courses and shit

  • @whosonedphone
    @whosonedphone 9 місяців тому +1

    Love the detailed tangents. Would like to know what the window size is.

  • @trainwreck1827
    @trainwreck1827 10 місяців тому

    What a G! Thanks for introducing me to this guy. I've been using WS for years and it's nice to pick up some new tricks.

    • @davidbombal
      @davidbombal  10 місяців тому

      You're welcome! Chris is the person to follow if you want to learn about Wireshark.

  • @NetworkNinja111
    @NetworkNinja111 10 місяців тому +1

    Great video!! I do like when he gets straight to the point though. The tangents throw me off cause I lose focus. When he gets straight to the point I feel like gain so much knowledge and light bulbs start going off. Thanks again for this amazing content!!

    • @ChrisGreer
      @ChrisGreer 10 місяців тому

      That is great feedback, thank you!

  • @takistmr
    @takistmr 9 місяців тому +1

    Great content, as always David and Chris! I will stay on one point: "...let's buy training instead of a lot of equipment!"

  • @EWCRC
    @EWCRC 10 місяців тому +2

    Always enjoy a good detailed tangent.

  • @dandele123
    @dandele123 10 місяців тому +1

    More Chris Greer videos! His content is awesome. Post more on your own channel Chris!

    • @ChrisGreer
      @ChrisGreer 9 місяців тому +1

      I know… 😆 thanks for calling me out!

  • @Nicksegura-s1c
    @Nicksegura-s1c 5 місяців тому

    I love the real world tangents, especially if they are heavily technically based. Much love, and thank you for the wealth of information.

  • @anuragvashishth1564
    @anuragvashishth1564 7 місяців тому

    Fantastic Chris for the wonderful troubleshooting session.

  • @tgrav3
    @tgrav3 10 місяців тому +2

    This is so awesome!
    @Chris, I support the detailed tangents!

    • @davidbombal
      @davidbombal  10 місяців тому

      Glad you enjoyed the video!

  • @psypherpro
    @psypherpro 5 місяців тому

    For me the way Chris explain it is so excellent and informative.

  • @diptiranjansahoo5278
    @diptiranjansahoo5278 10 місяців тому +1

    Hey David and Chris,
    You both are awesome. Thanks for all these videos.
    Chris, you are looking cool with your new beard style 😊..

  • @TheChad17
    @TheChad17 10 місяців тому +2

    Great work. Your videos keep me entertained and interested. Thank you again.

  • @Traumatree
    @Traumatree 10 місяців тому

    If you had mention VirtualBox at the beginning, I wouldn't even need to check the pcap lol
    Great video guys thx!

  • @georgecherogiorgos4820
    @georgecherogiorgos4820 9 місяців тому

    Great stuff! Really enjoyed Chris' analysis! Keep 'em coming!

  • @Cole987Turner
    @Cole987Turner 9 місяців тому

    Thanks to you both for this video!!! Had a problem, which seems to be a very similiar to this and I used your technique to troubleshoot! Thank you very much!! :)

  • @pmanolak
    @pmanolak 9 місяців тому

    Brilliant video as usual. David and Chris are so sweet persons and have the ability to pass their knowledge. and that's make the difference!! You can be a great scientist, but if you dont have the ability to spread your knowledge, you cant be a good teacher.

  • @RadAlzyoud
    @RadAlzyoud 10 місяців тому

    Brilliant.
    And Chris, you got yourself a new subscriber.
    Thx for sharing both.

  • @gamereditor59ner22
    @gamereditor59ner22 10 місяців тому +1

    That's cool! Thank you for the tricks!! I will use wireshark to understand in depth of packets!

  • @MuhammadUsman-xx2ef
    @MuhammadUsman-xx2ef 10 місяців тому

    Really fantastic video and good to see Chris x David again. David please invite Neal Bridges again and talk about Cybersecurity and how AI is shifting the paradigms of the Cybersecurity
    Thanks and Love from Pakistan ❤

  • @joechen9498
    @joechen9498 9 місяців тому

    Thank you guys. you made packet analysis interesting. Definitely checking on Chris's channel and learn more about Wireshark.

  • @anonymousperson45152
    @anonymousperson45152 9 місяців тому

    Really enjoyed video! Thanks for both of you guys for these informative content.

  • @jonathantx
    @jonathantx 7 місяців тому

    Like always this content with chris is spot on and awesome. BTW tangents are awesome, they help out a bunch.👍, I wish I could give these videos more than 1 thumbs up LOL

  • @pcap_pirate960
    @pcap_pirate960 10 місяців тому

    Hands on is the Best way to learn, build home labs small or large testing stuff on that and watching what it does is when you can really grasp this stuff.

  • @notaras1985
    @notaras1985 8 місяців тому

    28:50 what usually causes the segmentation or reassembly issues?

  • @stylis666
    @stylis666 10 місяців тому

    I really like it, a lot! You know, those detailed tangents.
    An explanation of how an application works and what you can use it for is nice, but if you skip those tangents, I will not know why everything I see is or behaves just slightly different from what you're explaining. I'd have to look up every single detail that you explain in those tangents.
    But if you have physical access to the network, can't you then just hook up to the wire that is going into your modem or coming out of your modem to see what packages are sent from the server?

  • @NicolasStolz
    @NicolasStolz 9 днів тому

    Thanks for sharing. It is very informative and well presented. Keep it up

  • @MyDancingirl
    @MyDancingirl 9 місяців тому

    Great interview and tutorial! Many helpful insights 💎

  • @ged4440
    @ged4440 9 місяців тому

    On all of the web, you guys are the best!

  • @k_usuan
    @k_usuan 10 місяців тому

    Great content and bravo! And oh your video editing is top top 🔥

  • @stardavos
    @stardavos 9 місяців тому +8

    Keep on tangenting. Thats what they made 1.5x speed for

  • @LiquidShepard
    @LiquidShepard 10 місяців тому

    Love youre content David, ure my example of a hero!

  • @OurSpaceshipEarth
    @OurSpaceshipEarth 9 місяців тому +2

    Best Wireshark Howto EVER. +bonus TCP SYN ACK analysis, hit _that_ spot by bringing out an RFC reference. So dope good content man tangent detail Approved [ACK]. =:r[]

  • @magpieenterprise6781
    @magpieenterprise6781 3 місяці тому

    Hi Chris or Dave: At 32:39 you say we are dealing with two 1460s but I see 14060. Can you clarify this for me? How is 14060 adding up to 2920? Thanks

  • @A..n..d..y
    @A..n..d..y 10 місяців тому

    I really enjoy this. Wireshark is such an important tool.

  • @nawlaynawlay4722
    @nawlaynawlay4722 9 місяців тому

    Thank you for sharing your knowledge and experience.

  • @mikkio5371
    @mikkio5371 9 місяців тому

    I enjoy listening to both you guys

  • @OurSpaceshipEarth
    @OurSpaceshipEarth 9 місяців тому +1

    "Ya I had 'er, and all I got was.. EVERYTHING!" Low level? Well I did turn on my physical connector's Promiscuous mode! Rocked that Packet Capture all night! After all; "PCAPs or it's fake!".

  • @ignacioserrano7295
    @ignacioserrano7295 5 місяців тому

    Thank you very much for the video you made; I learn a lot!

  • @mahdihasan42
    @mahdihasan42 3 місяці тому

    This person did not invest money on Wireshark, but he owns it.

  • @pinojuanka
    @pinojuanka 9 місяців тому

    Hello David, greetings from Chile, a query do you know of any book that you recommend that talks about the study of packages?

  • @DanTheMan_SonofThunder
    @DanTheMan_SonofThunder 17 днів тому

    Great video guys, much appreciated

  • @aguchnaka292
    @aguchnaka292 10 місяців тому

    Thank you David and Chris. What about the QUIC protocol, what is your opinion? Should we use it instead of the good old TCP?

    • @ChrisGreer
      @ChrisGreer 10 місяців тому

      It's a good question. Over the web, many services are switching to QUIC under our noses. If it is an internal enterprise application, it may not be worth the switch unless users are widely distributed over unreliable networks. That is where QUIC can outshine TCP. For for general use, TCP is just fine. Most of TCP lives on within QUIC anyway. Thanks for asking!

    • @aguchnaka292
      @aguchnaka292 10 місяців тому

      Thank you Chris, but isn't the QUIC build on top of the UDP? @@ChrisGreer

  • @YusriCassim
    @YusriCassim 10 місяців тому

    Great learning this morning weekend thank you sir for sharing this tutorial video it’s makes me inspired by this video sir 32:41

  • @heraldbygrace
    @heraldbygrace 10 місяців тому

    Thanks Chris and David!!!
    This seems like a murder mystery thriller movie to me. lol. 🤣🤣🤣

  • @Abduselam.m
    @Abduselam.m 10 місяців тому +1

    David thanks you can improve my education

  • @majiddehbi9186
    @majiddehbi9186 10 місяців тому

    Great to see u guys again

  • @joerockhead7246
    @joerockhead7246 10 місяців тому

    my fav. thanks, david, & chris.

  • @Ro-tn1tp
    @Ro-tn1tp Місяць тому

    How do you add that TCP segment length column? I've looked and can't find anything?

  • @GeoPeter
    @GeoPeter 10 місяців тому

    Super valuable video! Thanks!

  • @ericheydemann9556
    @ericheydemann9556 9 місяців тому

    Good work out of you both 👍👍👍

  • @Zedorek
    @Zedorek 9 місяців тому

    so what was shaping the packet? which virtual setting on the host was responsible for this?

  • @stupedcraig
    @stupedcraig 9 місяців тому

    Can you do one on BGP and Slow Peer for troubleshooting slow networks?

  • @Unique-m4z
    @Unique-m4z 10 місяців тому

    eagerly waiting for stuff like that from you

  • @mohammadalmaazi
    @mohammadalmaazi 10 місяців тому

    I am a windows user and using wireshark version 4.0.0 . when I jumped to check tcp option from the server side. I could find the field that showed me the SACK is not supported and also the window size. Do I need to update my wireshark ??

  • @RicardoJames-l8r
    @RicardoJames-l8r 9 місяців тому

    Hi,
    Does these same techniques apply to WAN networks?

  • @Sudqi55
    @Sudqi55 8 місяців тому

    why 7 multiply with 128 in window scale is a problem, can you explain please?

  • @feiwoza
    @feiwoza 9 місяців тому

    Chris you look better with the beard :) - thank you David and Chris for this ...

  • @jacobhenriksen2324
    @jacobhenriksen2324 9 місяців тому

    I would love to see how to troubleshoot asymmetric routing that is messing up TCP handshakes, using Wireshark

  • @shahnawazali1502
    @shahnawazali1502 9 місяців тому

    I have a question, my internet connection is 100 megabytes , speedtest shows it but my downloading speed is 2.5 MegaBits (tested on test files) . Whats the problem?

  • @JamesJukich
    @JamesJukich 8 місяців тому

    how did you get the TCP Segment Length column?

  • @cyberdefenseddi
    @cyberdefenseddi 10 місяців тому

    Enjoyed the content! 😎👊 “it’s always DNS”

  • @jesperhansen7474
    @jesperhansen7474 9 місяців тому

    keep it up with the details in wireshark. I need to lean nore :)

  • @TheChad17
    @TheChad17 10 місяців тому

    Can you please give me a quick synopsis of why Proton VPN compared to someone like Nord VPN?
    I know proton is a sponsor, but I believe you can provide some of what I’m asking about.
    Am I able to get more granular with proton as compared to Nord?

  • @karanb2067
    @karanb2067 9 місяців тому

    Idea for another video : covering active directory authorizations or AD attacks

  • @S0U1SB4N3.
    @S0U1SB4N3. 8 місяців тому

    yes please share details and rabbit trails !

  • @khanabdulmuhammad5625
    @khanabdulmuhammad5625 10 місяців тому +1

    Chris is Awesome

  • @Polandisch
    @Polandisch 10 місяців тому

    Great video. Thank you.

  • @IrishOverkilled
    @IrishOverkilled 10 місяців тому +3

    It was over 5 minutes and we weren't in a pcap file... 😮😅

  • @JasonLashbrook-vf8ed
    @JasonLashbrook-vf8ed 10 місяців тому

    Do you have a video on tcpdump?

  • @alawiabbas9386
    @alawiabbas9386 10 місяців тому

    I want to start into cyber security, from where should i start

  • @raghavendrag6152
    @raghavendrag6152 7 місяців тому

    Thanks Chris

  • @ctrlaltdel3221
    @ctrlaltdel3221 10 місяців тому

    Watching now!