How I use Wireshark

Re:How I use Wireshark by dharmab on Tuesday June 19, 2018 @10:44AM (#17347123)

We recently used it to troubleshoot a problem where 2-3% of TLS connections on a certain VIP were failing. Turns out a switch inside our cloud provider was zeroing out two bits. (TCP CRCs only protect against corruption on the wire, not corruption that happens _inside_ a device!)

That was a fun support ticket.

[ Parent | on HN ]

Re:How I use Wireshark by spydum on Tuesday June 19, 2018 @12:31PM (#17348113)

I can one up that. I had corrupt HTTP payloads with what looked like boot loader data being inserted ! I tracked it back to VMWare host with a physical NIC driver that was reading past the buffer, and picking up the bootloader from memory. Inside the guest, wire shark was happy, but upstream at the LB it was receiving the nasty payload.

[ Parent | on HN ]