Wireshark.STE——通过Wireshark排查应用问题.pptVIP

Template Documentation Utilization of Software Tool WireShark to Trouble Shoot TEC and other Application issues Why would you ever need to trace the network? Presentation Objectives Overview of TCP stack and a typical TCP/IP packet exchange UDP vs TCP/IP, the OSI model, IPs, Sockets and Interfaces Methods/tools/execution for network tracing Making sense of the gathered trace. What is TCP/IP TCP/IP = Transmission Control Protocol – Internet Protocol. Originally invented by the DOD as a method for computers from different manufactures to communicate with one another, the protocol has become the standard for the majority of network based communication. The protocol works on the concept of “guaranteed deliverability” meaning that each packet transmitted contains a checksum control which requires acknowledgement from the remote receiving host. Should the transmitting system not receive the acknowledgement the last packet transmitted will be resent thus assuring delivery of the packet. A Basic TCP/IP example TCP/IP is a method for computer systems from different manufactures to talk to each other Uses a protocol standard to define the conversation The ability to analyze these conversations will help us become more effective in our troubleshooting An Overview of the typical TCP/UDP exchange I have found this diagram to be the best representation of the overall picture TCP is “guaranteed packet delivery” UDP is something of a spray No network presentation is complete without… The OSI Model Application (our products) Presentation (how the product will talk) Session – On which ports, sockets, speed etc Transport – the protocol used (tcp, ldap etc) Network – Physically sending/recving data Data – well.. The data Physical – Nic cards, Hubs, Routers, firewalls etc. Understanding the state of a socket – Client side Understanding the state of a socket – Sever side The entire picture… Stephens diagram Problem: Attempt to connect to incorrect port problem: tn 99 5539 Tryin