Ask Your Question
0

App performance is normal WHILE running packet capture

asked 2025-05-15 19:33:32 +0000

Vetteran gravatar image

updated 2025-05-15 19:38:21 +0000

I help support a 3rd party Web application. We have a location experiencing an issue that, while performing a data processing function the web app retrieves and opens data for review and correction processing. Opening this data to process is taking between 30 to 40 seconds to open. When I start/run a Wireshark packet capture using the local loopback interface then launch (all this on the server) and go through the same steps to process the data, it pulls up in 5 to 10 seconds which is considered normal latency for this operation. When I stop the capture, the same delay opening the data returns! We repeated this process getting the same results as before with the 30 to 40 second delay returning after the capture is stopped.

Does anyone have an idea why this is happening? Is there a setting in Wireshark that might be causing this? Is so, is there an option to disable it?

edit retag flag offensive close merge delete

Comments

It might help if you add the output of wireshark -v or Help->About Wireshark:Wireshark to the question info. That will include the capture library and operating system info.

Chuckc gravatar imageChuckc ( 2025-05-15 19:37:35 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2025-05-16 06:03:58 +0000

SYN-bit gravatar image

The only thing I can think of that is changed to the system when a capture is running is that the interface(s) on which you capture are put in "promiscuous mode". You could check if this is what is changing the app behavior by disabling "promiscuous mode" in the capture options and then start another capture.

If the response time is still 30-40 seconds in this test, it would be interesting to see the difference in the capture files.

edit flag offensive delete link more

Comments

Thank you for the suggestion, I will give that try.

Vetteran gravatar imageVetteran ( 2025-05-19 15:02:21 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2025-05-15 19:33:32 +0000

Seen: 37 times

Last updated: May 16