Read the traffic. Explain the system.
How to Measure Retransmissions in a Packet Capture
Use Wireshark and TShark to count TCP retransmissions, calculate a directional share, and check sequence numbers, recovery timing and capture quality.
By Packet Report Editorial Team · 2026-10-13 · 7 min readLatest
How to Identify MTU Problems in Wireshark
Use Wireshark filters to find MTU errors, inspect packet sizes and MSS, and test suspected path MTU black holes without mistaking offload artifacts.
How to Identify a TLS Handshake Failure in Wireshark
Find TLS alerts, isolate the failing TCP stream, and distinguish handshake rejection from resets, timeouts, and encrypted TLS 1.3 messages.
How to Find DNS Timeouts in Wireshark
Find unanswered DNS queries, inspect retries and response times, and distinguish a real timeout from DNS errors or an incomplete capture.
How to Find a Slow Server Response in Wireshark
Use Wireshark response-time filters and packet timestamps to find slow requests, distinguish transport stalls, and understand encrypted-traffic limits.
How to Diagnose TCP Resets in a Packet Capture
A Wireshark and TShark workflow for finding TCP resets, checking sequence numbers, and investigating endpoint or network-device resets.
How to Compare Network Latency in Packet Captures
A Wireshark and TShark workflow for comparing TCP RTT across captures, checking capture quality and separating network delay from application waits.
More articles
How to Capture Packets from a Wireless Client
Choose the right capture point, record a Wi-Fi client’s traffic with Wireshark, and use monitor mode when you need raw 802.11 frames.
What HTTPS Hides in a Packet Capture — and What It Leaves Visible
A packet capture can still reveal addresses, timing, size, transport behaviour and sometimes a hostname even when HTTPS protects page contents.