TechNet
Products
IT Resources
Downloads
Training
Support
Products
Windows
Windows Server
System Center
Internet Explorer
Office
Office 365
Exchange Server
SQL Server
SharePoint Products
Lync
See all products »
Resources
Curah! curation service
Evaluation Center
Learning Resources
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Script Center
Server and Tools Blogs
TechNet Blogs
TechNet Flash Newsletter
TechNet Gallery
TechNet Library
TechNet Magazine
TechNet Subscriptions
TechNet Video
TechNet Wiki
Windows Sysinternals
Virtual Labs
Solutions
Networking
Cloud and Datacenter
Security
Virtualization
Updates
Service Packs
Security Bulletins
Microsoft Update
Trials
Windows Server 2012 R2
System Center 2012 R2
Microsoft SQL Server 2012 SP1
Windows 8.1 Enterprise
See all trials »
Related Sites
Microsoft Download Center
TechNet Evaluation Center
Drivers
Windows Sysinternals
TechNet Gallery
Training
Training Catalog
Class Locator
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
e-Learning overview
Certifications
Certification overview
MCSA: Windows 8
Windows Server Certification (MCSE)
Private Cloud Certification (MCSE)
SQL Server Certification (MCSE)
Other resources
TechNet Events
Second shot for certification
Born To Learn blog
Find technical communities in your area
Support options
For small and midsize businesses
For enterprises
For developers
For IT professionals
From partners
For technical support
Support offerings
For home users
More support
Microsoft Premier Online
Microsoft Fix It Center
TechNet Forums
MSDN Forums
Security Bulletins & Advisories
International support solutions
Log a support ticket
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Sign in
nettracer
Options
RSS for posts
Atom
RSS for comments
OK
Search Blogs
Tags
"Policy based routing"
AdditionalDelayedWorkerThreads performance local
Bogus IP packet
decrypt TLS SSL
Direct Access
DisableDHCPMediaSense
DynamicBacklogGrowthDelta EnableDynamicBacklog MaximumDynamicBacklog MinimumDynamicBacklog
EnablePMTUDiscovery performance
excessive ARP malware
IIS certificate
IPHTTPS
IPReassemblytimeout
Lync 2010
MAPI
Netmon Wireshark capture packet architecture
NLB multicast remote
NULL authentication NTLM Kerberos
SCCM package distribution slow
slow file copy QoS XP
SQL performance WAN
Syn attack synattackprotect
TCP keepalive
TMG
TMG Compression
web publishing
Archive
Archives
May 2014
(2)
December 2013
(1)
October 2013
(4)
August 2013
(1)
July 2013
(3)
January 2013
(10)
July 2012
(1)
June 2012
(6)
May 2012
(3)
September 2011
(4)
October 2010
(5)
August 2010
(11)
July 2010
(3)
June 2010
(7)
May 2010
(1)
August, 2010
TechNet Blogs
»
nettracer
»
August, 2010
Sort by:
Most Recent
|
Most Views
|
Most Comments
Excerpt View
|
Full Post View
Where are my packets? Analyzing a packet drop issue...
Posted
over 4 years ago
by
MuratKa1
One of the most common reasons for network connectivity or performance problems is packet drop. In this blog post, I’ll be talking about analyzing a packet drop issue, please read on. One of customers was complaining about remote SCCM agent...
Have you ever wanted to see which Windows process sends a certain packet out to network?
Posted
over 4 years ago
by
MuratKa1
Hi there, We are sometimes requested to find out which process sends a certain packet. This generally stems from security concerns (like seeing some TCP session attempts on firewall/IDS device logs etc). Even though it may not be exactly possible to...
Excessive ARP requests, is it malware or legitimate activity?
Posted
over 4 years ago
by
MuratKa1
Hi there, In this blog post, I would like to talk about a network trace analysis scenario where we were requested to find out if excessive ARP requests were legitimate or not. Here are more details about the problem: Problem description...
Why does it take too long to retrieve data from SQL server over a WAN connection?
Posted
over 4 years ago
by
MuratKa1
1
Comment
Hi there, In today’s blog post, I’m going to talk about how to troubleshoot a WAN performance problem by using simultaneous network traces. One of customers reported that they were having performance problems when retrieving data...
Effects of incorrect QoS policies: A story behind a slow file copy...
Posted
over 4 years ago
by
MuratKa1
2
Comments
Hi there, In this blog post, I’ll talk about another network trace analysis scenario. The problem was that some Windows XP clients were copying files from a NAS device very slowly compared to others. As one of the most useful logs to...
Exchange servers send ICMP and UDP packets to clients or Domain Controllers, why?
Posted
over 4 years ago
by
MuratKa1
1
Comment
Hi, I would like to talk about a few network trace analysis cases where we were requested to find out why certain packets (spefically ICMP and UDP) were sent by Exchange servers. You’ll find below more details about how we found the processes...
Where have those AFD driver related registry (DynamicBacklogGrowthDelta / EnableDynamicBacklog ...) keys gone?
Posted
over 4 years ago
by
MuratKa1
1
Comment
Hi there, In today’s blog post, I’m going to talk about some registry keys that were removed as of Windows 2008. Recently a colleague raised a customer question about configuring the following AFD related registry keys on Windows 2008...
Why are local resources accessed slowly when loopback or local IP address is used whereas accessing the same resources over the network works fine?
Posted
over 4 years ago
by
MuratKa1
Hi there, In today’s blog post, I’m going to talk about a local resource access performance issue. One of our customers reported that SQL server instances running on a Windows 2003 server were failing over to another node especially...
Does sqllogship.exe have anything to do with web servers in the internet? Story behind CRL check for certificates ...
Posted
over 4 years ago
by
MuratKa1
Hi there, In today’s blog post I’m going to talk about a network trace analysis scenario where I was requested to analyze a few network traces to understand why a server was trying to contact external web servers when sqllogship.exe...
Is it real or Matrix? Some facts about network traces...
Posted
over 4 years ago
by
MuratKa1
Hi there, In this blog post, I would like to talk about some facts about network traces. A while ago we were discussing how much we could depend on network trace data when it comes to those question: “The outgoing packet that we see in a network...
Why should a DC contact clients in the domain?
Posted
over 4 years ago
by
MuratKa1
1
Comment
Hi there, In today’s blog post, I’m going to show you how I found out why a Domain controller was contacting random clients in the domain. This issue was reported by the customer due to security concerns. They suspected that a suspicious...