One of the important things that you can use Wireshark for is application analysis and troubleshooting. When an application slows down, it can be because of the LAN (quite uncommon in a wired LAN), the WAN service (common due to insufficient bandwidth or high delay), or slow servers or clients (we will see this in the Database traffic and common problems section). It can also be due to slow or problematic applications.
The purpose of this chapter is to get into the details of how applications work, and provide some guidelines and recipes for isolating and solving these problems. In the first recipe, we will learn how to find out and categorize applications that work over our network. Then, we will go through various types of applications, see how they work, how the network influences their behavior, and what can go wrong.
In this chapter, we will learn how to use...