Network Traffic Analysis

Posted on 2012-09-17
Last Modified: 2012-11-13
I have a poorly performing web site that I jsut can't seem to track the problem.  My website is making a call to the sql database then returning that data and rendering the page.  Normally this page can load in about 2 seconds but lately I am seeing up to 14 seconds.  It is very intermiitant in that I can refresh the page and get 2 seconds one time then refresh again and receive 6 seconds.  the architecture is web server in dmz zone of firewall and sql inside secure zone.  No changes have been made to sql or web servers.  there is a load balancer that serves up web server but this was bypassed with similar results.  Question is " how can I identify how long it is taking for the traffic from the point the request is made at the web server to the sql server then back to the web server?"  I have a staging environment with the same DB and similar architecture that does not experience the issue.
Question by:NytroZ
    LVL 17

    Accepted Solution

    If this is on Linux, try the 'tcpdump' command, and then view the resulting file in the Wireshark program. You will get full time stamps of all packets.

    If this is Linux, your can even run Wireshark on the server and capture directly from the ethernet port.
    LVL 22

    Expert Comment

    by:Matt V
    I would guess the database query is your bottleneck, trying running the SQL Query Analyzer and see if you get different results running the same query over and over.  If the query is sound, then I would check your firewall logs to see if there is a delay between the LAN and DMZ.
    LVL 7

    Expert Comment

    seconding pergr recommendation.  Packet capture, then look for unexpected delays between the HTTP packets and the SQL packets.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Join & Write a Comment

    Suggested Solutions

    Title # Comments Views Activity
    Switch Speed 2 46
    Scan IP address, obtain info 7 47
    Sonicwall - avoid extra logon to get to Internet 11 35
    Arista Switches 2 14
    As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
    Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now