Where can I upload a capture in hopes of understanding things?
Hello everyone,
I'm going to be honest here and say that when it comes to all of the technical data that WireShark provides, I'm at a complete loss. I have been trying numerous websites, support community's, and software to try and understand if the issue I'm having is on my side or somewhere down fiber line after it leaves my house. Long story short, I have been having severe latency on my upload side since Spectrum installed fiber in our are last July and I dropped Starlink and jumped on board with fiber. They have sent techs out to try and find the issue, replaced two ONT's and the terminal coming into the house, nothing has helped. The tech has seen the upload latency issues when under load, but the bosses at Spectrum are always quick to say "the ping test show no issue, so that's a you problem". The "you" being me of course. The tech argued with his manager but nothing changed. Okay, maybe that wasn't the shortest version of a much longer story, but I tried.
So I captured a couple of test on WireShark while running Waveform's Buffer Bloat tool and to me, things look horrible. Maybe it's because I don't know much about what I am looking at, but seeing all of the red, and black/red almost exclusively while on the Upload portion of the test makes me think there is something somewhere, I just don't know where to start looking.
Can someone recommend a location to upload this capture, where someone much more knowledgeable than myself in this area can take a look and see if I do have an issue or if I'm just being crazy?
*Update: Thanks for the help on where to upload the capture Chuck. The link to the capture is below if anyone can assist me in understanding it. The parts that I question start to appear around Frame 1728724 and continue down from there. This is the around the time that download test finished and the upload test began when using Waveforms tool.
https://www.dropbox.com/scl/fi/u130yo...
Any help/suggestion is much appreciated.
-Jason
Place it on a public fileshare like Google, Microsoft OneDrive, Dropbox, ... then update the question with a link to it.
It might help to disable the colorization of packets until you get a basic understanding of what's happening.
Table 3.14. Main toolbar items
Click on the Colorize button or disable with
View->Colorize Packet List@Jason_C: open up the capture file in Wireshark, go to preferences, at the left hand side expand the Protocols list, scroll down to TCP and click on that. Now at the right hand side look for the preference checkbox near the top: "validate the TCP checksum if possible" and make sure that's unchecked. Click Ok and wait for the capture file to be redirected. How does it look now?
Hello Jaap, that checkbox was already cleared (unchecked) when I went to check just now.