Slow Loading

[+BudMan MVC]

Im with Circaflex here - see half of what I was paying for would be call to isp... Unacceptable!!!  Even if was prime time...  One test ok - but if best you could get is half of what your paying for.. I would be on the phone with them.. Your not paying for 50, your paying for 100.. 90% of that ok sure.. But 50 - no sorry something is wrong!

[Mindovermaster Global Moderator]

@BudManI looked at this guide supplied by Circaflex: http://www.linuxandubuntu.com/home/how-to-use-wireshark-to-inspect-network-traffic

 

And I added the group permissions, but it still says:

 

Couldn't run /usr/bin/dumpcap in child process: Permission denied

 

[+BudMan MVC]

Well run it as root then..

 

Use tcpdump - just figured you were a graphics sort of guy..

[Mindovermaster Global Moderator]

Here, I did it again, the problem is that the Chicago location is always slow. I changed server to germantown, WI.

 

[Mindovermaster Global Moderator]

When I ran it as root:

 

Lua: Error during loading:
 [string "/usr/share/wireshark/init.lua"]:44: dofile has been disabled due to running Wireshark as superuser. See https://wiki.wireshark.org/CaptureSetup/CapturePrivileges for help in running Wireshark as an unprivileged user.

Edit: OK, it seems to work now...

 

Edit2: What information am I looking for?

[adrynalyne]

30 minutes ago, Mindovermaster said:

@CircaflexSometimes, it is slower, some days it is higher. Know anything about fluctuation? And that was only ONE scan to ONE server. I just did it once to prove a point.

Dude don’t bite the hand that feeds you. He is trying to help you out. Denial is just going to hinder progress. 

[Mindovermaster Global Moderator]

1 minute ago, adrynalyne said:

Dude don’t bite the hand that feeds you. He is trying to help you out. Denial is just going to hinder progress. 

you see my last to 2nd post?

[+BudMan MVC]

While your sniffing go to someplace that you feel is slow and then save that sniff and post it..

[adrynalyne]

Just now, Mindovermaster said:

you see my last to 2nd post?

Yes but I’m also talking about your general attitude towards people trying to help you. One of the best some ways to turn people away from you is ask for help and then proceed to tell them how wrong they are.

[Mindovermaster Global Moderator]

3 minutes ago, adrynalyne said:

Yes but I’m also talking about your general attitude towards people trying to help you. One of the best some ways to turn people away from you is ask for help and then proceed to tell them how wrong they are.

Hard to do that when you are half-arsed...

 

But, anyway, to my last question, what am I looking for in Wireshark?

 

Edit: OK Budman.

[+BudMan MVC]

Not going to be able to explain it to you your going to have to post it so I can look..   PM it to me if you don't want to put it up for public consumption.

 

Do you really want to get into what tcp retrans is and looking for response time to your syn.. ie how long it takes for the syn,ack to come back, etc. etc.  Could write a book on looking at sniffs for what is wrong

[Mindovermaster Global Moderator]

Here's one, this was on going to Gmail. it, again, was just sitting there for a few seconds. Then it went on its merry way.

 

I ran Wireshark, then immediately stopped it after it was fully loaded:

 

http://www.mediafire.com/file/mm5i15m84g9c6io/gmail.pcapng

 

Edit: You've helped me enough, BudMan.

[+BudMan MVC]

Ok first thing that jumped out at me is this...

 

 

What is this.. Its crap traffic...  IP is owned by

 

NetRange:       104.193.176.0 - 104.193.183.255
CIDR:           104.193.176.0/21
NetName:        MCPROHOSTING

 

Its the largest conversation in your sniff at over 5800 packets...  Running ###### like that in the background sure not going to help..

[Circaflex]

Are you running your own Minecraft server from home?

[Mindovermaster Global Moderator]

5 minutes ago, BudMan said:

Ok first thing that jumped out at me is this...

 

<snip>

 

What is this.. Its crap traffic...  IP is owned by

 

NetRange:       104.193.176.0 - 104.193.183.255
CIDR:           104.193.176.0/21
NetName:        MCPROHOSTING

 

Its the largest conversation in your sniff at over 5800 packets...  Running ###### like that in the background sure not going to help..

I had minecraft running, sorry about that. Forgot I had it on. The "MCPROHOSTING" server is in Toronto, Canada.

 

Let me run another sniff with it off..

[Mindovermaster Global Moderator]

There: http://www.mediafire.com/file/saecywm8xaxyuoc/gmail2.pcapng

[+BudMan MVC]

I don't see anything going on in the sniff that points to problems - response to syn, very quick..

 

 

Other than the ###### ton of that other conversation.. There is nothing that jumps out as wrong.  Your dns queries are quick.. there are not retrans - so no lost packets, etc.

[Mindovermaster Global Moderator]

Have any idea what the culprit could be? Bad cable? Bad Eth0 port? Bad Router? Bad modem? Bad ISP?

[Circaflex]

23 minutes ago, Mindovermaster said:

Have any idea what the culprit could be? Bad cable? Bad Eth0 port? Bad Router? Bad modem? Bad ISP?

Do some trial and error.

 

By cable, are you referring to the ethernet cable you use to directly connect, or are you talking the actual coax from TWC? If you are referring to the ethernet cable, I would find that unlikely, considering your father has the same issues on another device.

 

Bad Eth0 port, doubtful, see previous reply.

 

Bad router - possible, one way to be sure would be remove it from the equation. Hardware directly to the cable modem and browse as usual. If the issue goes away, probably the router. If the issue still persists, could be the modem but you might want to call your ISP and have them do a line test.

[Mindovermaster Global Moderator]

13 minutes ago, Circaflex said:

Do some trial and error.

 

By cable, are you referring to the ethernet cable you use to directly connect, or are you talking the actual coax from TWC? If you are referring to the ethernet cable, I would find that unlikely, considering your father has the same issues on another device.

 

Bad Eth0 port, doubtful, see previous reply.

 

Bad router - possible, one way to be sure would be remove it from the equation. Hardware directly to the cable modem and browse as usual. If the issue goes away, probably the router. If the issue still persists, could be the modem but you might want to call your ISP and have them do a line test.

The Ethernet, yeah.

 

I'll try connected just to modem tonight, after she goes to bed, so my Mom doesn't go screaming that the wireless Internet doesn't work...

[Mindovermaster Global Moderator]

Very Very Very weird...

 

I just now switched ports on our router. 3 to 4. And it's back up to where I was normal. Just... weird? I had Ethernet ports on routers go out on me before...

 

The apocalypse all over again?

[+BudMan MVC]

so your saying its normal now.. From your 2nd sniff I saw not real issue that could explain your problem.. There were a few what looked like dupe acks.. But there was nothing to suggest a problem with the ethernet connection.  Such a problem would be clearly obvious in lots and lots of retrans, etc.

[Mindovermaster Global Moderator]

49 minutes ago, BudMan said:

so your saying its normal now.. From your 2nd sniff I saw not real issue that could explain your problem.. There were a few what looked like dupe acks.. But there was nothing to suggest a problem with the ethernet connection.  Such a problem would be clearly obvious in lots and lots of retrans, etc.

Yeah, I asked a friend, and he says some acks are acting up, too. But that should not slow me down by any means. So we are double sure now.

 

It's not "normal", but it is a lot faster than it was...