Network Latency

Investigating High Network Latency

Troubleshooting network latency issues can be difficult in any network, particularly when you are reliant on 3rd-parties for connectivity between different sites. In large, complex networks this difficulty is magnified by the sheer number of network elements that can negatively impact the way that packets traverse the network.

Many analysts rely on their instinct to narrow down the causes of problems, placing ad-hoc troubleshooting tools in various parts of the network and hoping that the issue reoccurs. Full packet capture across the network, with time synchronisation via a GPS signal, or some other external source, allows you to quickly solve latency problems the first time.

As packets traverse the network, EndaceProbe™ Analytics Platforms can record them with nanosecond-accurate timestamps, enabling you to quickly see exactly how long each packet took to traverse the network between capture points.

EndaceVision and EndacePackets

EndaceVision™ and EndacePackets™ are browser-based investigation tools included on every EndaceProbe™Analytics Platform.

EndaceVision provides a number of visualization tools for examining recorded network traffic. EndacePackets is a wireshark-based, protocol analyzer that provides on-probe decoding of recorded packet data.

Using EndaceVision and EndacePackets to Troubleshoot High Network Latency

Using EndaceVision, you can isolate packets-of-interest from one or more EndaceProbes for the period that you are interested in. By applying filters you can drill into particular hosts or specific protocols to identify the specific packets you want to examine.

Packets can be decoded directly using EndacePackets without requiring a download. Alternatively they can be downloaded as standard pcaps, or enhanced ERF format files with added Provenance™ data, for examination in Wireshark or other packet decode tools.

Endace Fusion

Investigate High Network Latency with market-leading applications, hosted on the EndaceProbe Analytics Platform.

The Fusion Partner Program brings together solutions from leading security and performance analytics vendors who leverage the EndaceProbe's Application Dock hosting and workflow API to integrate Network History into their applications.

Learn more