How can I check the convergence time of my network using wireshark? If i have 2 switches and I purposly create a loop for testing purposes and then I break the link that is forwarding, i want to figure out how fast is my switch taking to forward traffic.

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Don JohnstonInstructorCommented:
Run a continuous ping between two hosts that cross between the switches. Then disconnect the forwarding link and see how long it takes for the pings to resume.
TAMSCODANAuthor Commented:
Thats not a good solution because there is a 1 second delay between Ping therefore i would not get an accurate reading in milliseconds. That is why i want to know how to do this on wireshark to get the actual interval. I have mirrored both the forwarding port and the discarding port but I really dont understand how to get the info on wireshark as to how long that transition is taking.
Don JohnstonInstructorCommented:
Expecting spanning tree to converge in milliseconds is not practical.  The worst you should see (properly configured) is 2-3 seconds. The best I would expect is about 1 second.
Starting with Angular 5

Learn the essential features and functions of the popular JavaScript framework for building mobile, desktop and web applications.

TAMSCODANAuthor Commented:
RSTP as i understand it can also converge in appx 500ms on a small network. I am just trying to find the way to measure it on wireshark
Don JohnstonInstructorCommented:
How fast depends on the failure mode.  Half-second convergence is like the old EPA gas mileage estimates. That's a best case scenario. 1-3 seconds is typical.
TAMSCODANAuthor Commented:
ok, regardless of the timing I just want to know how to get it documented on a capture using wireshark. I appritiate your help but I want to know how to verify this information.
Don JohnstonInstructorCommented:
What kind of switches? Most managed switches log events. You should be able to see when a link goes down and when the blocking link starts to forward.
Nayyar HH (CCIE RS)Network ArchitectCommented:
Enable timestamps and use "debug spanning-tree event"

This would displays all spanning tree events, such as changes to the root or to the status of any of the ports. Also shows progress through listening and learning states to forwarding state. So you should see convergence take place.

config t
service timestamps debug datetime msec
debug spanning-tree event

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking Protocols

From novice to tech pro — start learning today.