Practical Packet Analysis

Here's Something Gnu

gnutella.pcap

This scenario is along the same lines as our earlier BitTorrent scenario. Tina, a user on our network, calls and complains that her computer is running incredibly slowly, whether she's doing something locally, over the local network, or over the Internet.

What We Know

This scenario presents the same case as our earlier BitTorrent example. As such, we know that this problem is widespread and is affecting other users, as well. However, the other users are only reporting slow speeds when dealing with the Internet and net-centric applications. The edge router on our network is reporting high processor utilization and a large amount of inbound and outbound traffic.

Tapping into the Wire

In this case, all of the symptoms ...