Hi! I have captured a TCP conversation which shows very different results in terms of RTT on client and server. Does this mean than only the network can have caused that massive RTT delay? Or what is my misunderstanding here?
Client is captured on SPAN Port Access Switch. IP: 13.166 Server is captured on server itself in DC (because to check 3rd party depedencies). IP: 1.20
Client:
image:
Server:
image:
Thank you!
Unfortunately, the images aren't visible; that's probably because you don't have enough karma to post images yet.
I'm not sure how you're measuring RTT, but if you're only looking at delta times from one packet to the next, then you're not really measuring RTT. If you haven't seen it, Jasper Bongertz has written a very nice article on his blog called Determining TCP Initial Round Trip Time which you might find to be informative.
In any case, if packet delta times are very short on the server side, then it seems that server processing time is small and if there are large packet delta times on the client side, then most likely that's due to the network latency then. It's hard to say for certain without examining some packet captures though, so if you're able to upload 2 capture files taken simultaneously on both the client and server to any online file sharing site, then someone may be able to analyze them and provide more feedback.
Asked: 2019-04-09 10:43:07 +0000
Seen: 536 times
Last updated: Apr 09 '19
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
