Wireshark mailing list archives
Re: (Is this message being received by anyone?) How to interpret RTT graph
From: Shawn Carroll via Wireshark-users <wireshark-users () wireshark org>
Date: Thu, 28 Mar 2019 14:58:50 -0400
I received it! I think most people have moved to an online forum-I forget the details, but perhaps someone else can chime in with them for us? Thanks! :)
On Mar 28, 2019, at 10:35 AM, L A Walsh <wireshark () tlinx org> wrote: (Sorry for duplicates if there are any) Usually I see a copy of my email come back to me when I send an email to a list, but have seen nothing back from the list. I verified my list options, and it seems there might be one that could cause suppression depending on definintions, so I toggled it to see if that makes a difference. Thank-you for your forbearance. I was looking to understand the Round Trip Time graph and why it seems to jump up and down between near 0 and 270ms. That doesn't make sense to me -- first I don't see how some of them would have an RTT time of near 0 -- I don't see how that would be possible, so I figure I don't understand how to read the graph. Also, I don't see why the RTT would jump up and down and why there are "gaps" in the graph like between 45-85 seconds, vs. almost a solid-like appearance between 380-410s. Here is the RTT and througput graphs I'm trying to decipher: https://i.imgur.com/4ijLxTJ.jpg It looks like I have a relatively low latency when the graph peaks at around 150ms, but then something causes a jump so that latency climbs to over 250ms. It also seems to be the case where I'm getting low latency that my throughput peaks with average packet length falling from 1500 down to <100bytes. I don't see any clear errors. or why there is such a sudden drop Should I be looking for some type of dropped packets or errors? Could this be cause by my ISP cutting bandwidth in a step-wise manner as a means to control? Or could this be some sort of buffer-bloat with some buffer filling up and something halting output to wait for some buffers to drain...?? Another possibility is the application on my end is running on a high speed internal net with a 9k jumbo frame size -- could the mismatch between that the external frame size of 1.5k be causing some type of hysteresis? Any ideas on how, if it is possible I might even this out? It sorta wreaks havok with the local application... Thanks! ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- (Is this message being received by anyone?) How to interpret RTT graph L A Walsh (Mar 28)
- Re: (Is this message being received by anyone?) How to interpret RTT graph L A Walsh (Mar 28)
- Re: (Is this message being received by anyone?) How to interpret RTT graph Jeff Morriss (Mar 28)
- Re: (Is this message being received by anyone?) How to interpret RTT graph Shawn Carroll via Wireshark-users (Mar 28)
- Re: (Is this message being received by anyone?) How to interpret RTT graph Guy Harris (Mar 28)
- Re: (Is this message being received by anyone?) How to interpret RTT graph Guy Harris (Mar 28)
- Re: (Is this message being received by anyone?) How to interpret RTT graph Guy Harris (Mar 28)
- Re: (Is this message being received by anyone?) How to interpret RTT graph L A Walsh (Mar 29)
- Re: (Is this message being received by anyone?) How to interpret RTT graph L A Walsh (Mar 28)