Hi there, In today’s blog post, I’m going to talk about a local resource access performance issue. One of our customers reported that SQL server instances running on a Windows 2003 server were failing over to another node especially...

Hi there, In this blog post, I’ll talk about another network trace analysis scenario. The problem was that some Windows XP clients were copying files from a NAS device very slowly compared to others. As one of the most useful logs to...

Hi there, In today’s blog post, I’m going to talk about some registry keys that were removed as of Windows 2008. Recently a colleague raised a customer question about configuring the following AFD related registry keys on Windows 2008...

Hi there, In today’s blog post I’m going to talk about a network trace analysis scenario where I was requested to analyze a few network traces to understand why a server was trying to contact external web servers when sqllogship.exe...

One of the most common reasons for network connectivity or performance problems is packet drop. In this blog post, I’ll be talking about analyzing a packet drop issue, please read on. One of customers was complaining about remote SCCM agent...

Hi there, In this blog post, I would like to talk about some facts about network traces. A while ago we were discussing how much we could depend on network trace data when it comes to those question: “The outgoing packet that we see in a network...

Hi there, In this blog post, I would like to talk about a network trace analysis scenario where we were requested to find out if excessive ARP requests were legitimate or not. Here are more details about the problem: Problem description...

Hi there, In today’s blog post, I’m going to talk about how to troubleshoot a WAN performance problem by using simultaneous network traces. One of customers reported that they were having performance problems when retrieving data...

Hi, I would like to talk about a few network trace analysis cases where we were requested to find out why certain packets (spefically ICMP and UDP) were sent by Exchange servers. You’ll find below more details about how we found the processes...

Hi there, In today’s blog post, I’m going to show you how I found out why a Domain controller was contacting random clients in the domain. This issue was reported by the customer due to security concerns. They suspected that a suspicious...

Hi there, We are sometimes requested to find out which process sends a certain packet. This generally stems from security concerns (like seeing some TCP session attempts on firewall/IDS device logs etc). Even though it may not be exactly possible to...