The deltas of .001 or 002 in the first, second, and fourth request-response pairs are normal and indicate that the network is running efficiently. The .184 delta for the third pair is relatively large and could indicate an expensive request or a slow server.
Note: Filtering for MSRPC also includes other protocols that ride on top of MSRPC.
See Also Other Resources Diagnosing Basic Network Problems
Test comment whether there are gosts in the world.
ReplyDeletekapuzhongjiang
ReplyDelete. Apply the following filter: protocol.MSRPC. Then, you see only the actual messages and responses, as shown in the following table.
Time Delta Frame Number Source Destination Description
0.000000
3
157.59.136.191
157.54.61.199
MSRPC:c/o Request: unknown Call=0x112 Opnum=0xB Context=0x0 Hint=0xF4
0.001000
4
157.54.61.199
157.59.136.191
MSRPC:c/o Response: unknown Call=0x112 Context=0x0 Hint=0x68 Cancels=0x0
0.004000
5
157.59.136.191
157.54.61.199
MSRPC:c/o Request: unknown Call=0x113 Opnum=0xB Context=0x0 Hint=0xC4
0.001000
6
157.54.61.199
157.59.136.191
MSRPC:c/o Response: unknown Call=0x113 Context=0x0 Hint=0x6C Cancels=0x0
0.006000
7
157.59.136.191
157.54.61.199
MSRPC:c/o Request: unknown Call=0x114 Opnum=0xB Context=0x0 Hint=0xA90
0.184011
9
157.54.61.199
157.59.136.191
MSRPC:c/o Response: unknown Call=0x114 Context=0x0 Hint=0x2D0 Cancels=0x0
0.004000
11
157.59.136.191
157.54.61.199
MSRPC:c/o Request: unknown Call=0x116 Opnum=0xB Context=0x0 Hint=0xC0
0.002000
13
157.54.61.199
157.59.136.191
MSRPC:c/o Response: unknown Call=0x116 Context=0x0 Hint=0x218 Cancels=0x0
The deltas of .001 or 002 in the first, second, and fourth request-response pairs are normal and indicate that the network is running efficiently. The .184 delta for the third pair is relatively large and could indicate an expensive request or a slow server.
Note:
Filtering for MSRPC also includes other protocols that ride on top of MSRPC.
See Also
Other Resources
Diagnosing Basic Network Problems
kapuzhongjiang