![]() It’d be the equivalent if I told you to empty a swimming pool and you had the option to use a small plastic cup or a 5 gallon bucket for each trip you took to the pool. This means we weren’t fully taking advantage of our available frame size. ![]() ![]() This was being transferred over Ethernet, which has a max frame size of 1518 bytes. The length of each of the frame is ~500 bytes. Here is a screenshot as well as a link to part of the capture file on Cloudshark. It immediately became clear what the issue was. I performed a packet capture on a TFTP session using the default Cisco router and TFTP server settings. In this post I’ll show you why it’s slow and how to improve the speed, but perhaps more importantly, how to get to the bottom of something like this using Wireshark. This time I decided to go to Wireshark and take a deeper look. I always switched to FTP, the transfer went faster, and I never looked back. I had seen this before but never really took any time to look into it further. I was recently copying a fairly large 400 MB IOS image to one of our ASR routers and it was taking forever via TFTP. The interface is clean, and easy to find what you’re looking for. When you first login to the product you are presented with a page that has a list of your currently uploaded files, as well as a place to upload new files, or search for a saved capture. I encourage you to check it out here: FeaturesĬloudshark really worked to get as many features from Wireshark into the web based product, to the point that sometimes you forget that you are working in a web browser. If you aren’t sure if you want to commit to spending money on the product and want to try it out, or need to send someone a packet capture (that doesn’t contain sensitive information) for further review, they do have a page that allows you to upload up to 10MB of a capture, and then will generate a URL you can send off to someone else. I recently setup the enterprise VM appliance and it was extremely quick to get going, requiring barely any input from me. They currently offer a Solo, Professional, and Enterprise version, with the biggest difference being the number of accounts you can create on each and an ability to integrate with Active Directory for the enterprise version. Employees could then upload packet captures to the appliance for storage and analysis. ![]() ![]() OverviewĬloudshark was intended to be used as a hardware or VM appliance within a company. I wanted to write a quick post to take a look at the available options from Cloudshark and how they might work best for you. Everything is handled in the web browser. A company called QA cafe has a really great product called Cloudshark, that allows you to manage and analyze your packet captures without installing any software like Wireshark locally. In addition to getting to the bottom of a problem, they also serve as a great learning tool to get a better understanding of how different protocols work, and more importantly how they work in your network. They provide a look into what is really going on in your network and help get to the bottom of troubleshooting an issue very quickly. Packet captures are an important part of the network engineers toolkit. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |