Wireshark Sharkfest 2014 Session B1-ArtofPacketAnalysis

Поділитися
Вставка
  • Опубліковано 18 вер 2024
  • This is the beginner track from Sharkfest 2014. I go into some concepts of TCP/IP as well as one specific corner case (involving Nagle/Delayed-Ack)

КОМЕНТАРІ • 27

  • @ChrisGreer
    @ChrisGreer 10 років тому +1

    Great job as always Hansang. Great point about the "art" of analysis.

    • @hansangb
      @hansangb  10 років тому

      TY Chris. Only 11 months away for Sharkfest 2015!

  • @gungho1984
    @gungho1984 10 років тому

    Fantastic, as always! There is no one's work in this field that I respect more. Keep up the great work Hansang!

    • @hansangb
      @hansangb  10 років тому

      Thank you Larry. I think you give me too much credit, though! :)

  • @abhijithks7419
    @abhijithks7419 5 років тому

    @Hansang Bae : What happens if there is delayed ack and I get a dup ack. Will I ack immediately ? Or will I wait for dack timer ?
    I m sorry if this is a stupid question.

    • @hansangb
      @hansangb  4 роки тому

      Yikes, where are these comments hiding? Somehow, I'm missing the alert from YT that there is a comment waiting for me. Anyway, you're mixing up the direction of how the data is flowing. Delayed ACK is a receiver function. It's what the receiver is doing to not "waste BW with too man acks" So the sender sends data and the receiver ACKs them as required. I think what you meant to ask is "if there is a delayed ack issue, and the sender gets a dup ack from due to some packet loss before delayed ack event happened, will the sender transmit immediately?" And the answer is it depends :) If a bunch of packets leave, and one (or more) packets are lost, it will cause the receiver to send triple duplicate acks. Again, assuming there are packets arriving the missing packet to force the issue. And the sender that receives triple dup's will immediately retransmit the missing data. If that didn't answer your question, do let me know. I'm going to setup a rule on GMAIL to alert me for any YT comments.

  • @TeresaStrickland2011
    @TeresaStrickland2011 9 років тому

    I'll definitely buy the book. It will be invaluable in my daily work. I love Laura Chappelle too.

    • @hansangb
      @hansangb  9 років тому

      Teresa Strickland Thank you very much Teresa! My 2015 sessions will be going up shortly, so be on the lookout for that! Hansang

  • @alieskiocak01
    @alieskiocak01 10 років тому

    Thank you very much for this valuable videos Hansang...

    • @hansangb
      @hansangb  10 років тому

      Ali,
      It's my pleasure!
      hsb

  • @abhijithks7419
    @abhijithks7419 7 років тому

    Hansang Bee : Great stuff sir, a question if it can be answered. I see that you told rtt and delayed ack about 300 mili seconds. If my rtt is 300 mili seconds then what is the delayed ack timer if I m waiting for 200 ms. So is it rtt+200 ms or just 200 ms.

    • @hansangb
      @hansangb  7 років тому

      abhijith, I don't think the delayed ACK timer will change. It's usually a set timer. Remember, Retransmission timeout (RTO) and delayed ACK are two completely different things. The sender maintains the RTO while the receiver keeps track of the delayed Ack timer. thanks

  • @bijubalan7819
    @bijubalan7819 6 років тому

    Wonderful presentation. By the way, Is that book done yet?

  • @WG1973
    @WG1973 10 років тому

    Great presentation. When is the book coming out?

    • @hansangb
      @hansangb  10 років тому

      Willy, Well, I was hoping by November, but due to some work commitment issues, I'm going to have to push it out to next year. I'm sure it'll be ready by Sharkfest, though! Thank you for the kind words. Hansang

    • @hansangb
      @hansangb  9 років тому

      Swizzguy, You're talking about the INFO column right? go to Edit, Pref, Name Resolution, and turn *off* the transport name resolution. I much prefer the numerical port numbers vs names that don't mean anything! :) Sorry this is late, I've been - let's say preoccupied - :)

    • @WG1973
      @WG1973 9 років тому

      Hansang Bae Hansang, is there any update regarding the release of the book? Thanks.

    • @hansangb
      @hansangb  9 років тому

      Willy George Ah yes, the book! I'm starting over. After I wrote three chapters, I realized that it wasn't in my voice. And I figured if people watch my videos, or attend my sharkfest sessions, it must be because they like the style. The sheer act of writing the book caused me to go into pedantic mode, somehow! So scratch that, I'm starting over. But that also means I'll have to target it for 2016. Grrr.

  • @ironbum2000
    @ironbum2000 10 років тому +1

    Hey is that book done yet!

    • @hansangb
      @hansangb  10 років тому

      That's what I'm talking about!!! Thank you, Joel.

    • @MrSpiderman1321
      @MrSpiderman1321 10 років тому

      Hansang Bae your book sucks

    • @JarretLaMark
      @JarretLaMark 10 років тому +1

      MrSpiderman1321
      Which sucks more? Pointless one-line comments? Or those who make those comments while hiding behind anonymity?

    • @MrSpiderman1321
      @MrSpiderman1321 10 років тому

      Jarret L u suck at life little kid

  • @franciscosencion
    @franciscosencion 8 років тому

    has the book come out yet?

    • @hansangb
      @hansangb  8 років тому

      Hello Francisco. If you check out my page (ua-cam.com/users/hansangb) you'll see the "Hansang's Book" I'm publishing it there. Don't forget to subscribe!

  • @alexslocum4203
    @alexslocum4203 10 років тому

    Can I get a copy of the book please!

    • @hansangb
      @hansangb  10 років тому

      LOL! You see, it's working1