On an enterprise network, it's challenging to manage the everyday demands of keeping the network operational 99.999 percent of the time. The network administrator constantly monitors for issues that can cause a disruption. This situation can be volatile as one error can cause the network to go down. Is there a solution that can help us mitigate this challenge? Fortunately, there is help, as Wireshark has several built-in tools that help you troubleshoot the network.

In this chapter, we will address network latency and recognize some of the reasons why packet loss and slow response times occur. You'll gain a better appreciation of the importance of time values while troubleshooting. Once you complete the chapter, you'll have gained a better understanding of the coloring rules that help identify issues and are used in the Intelligent Scrollbar, so you can quickly identify and move to trouble spots in the capture. Finally, you'll also learn how to navigate the expert system, which subdivides the alerts into categories and guides the analyst through a more targeted evaluation.

This chapter will address all of this by covering the following:

• Analyzing latency issues
• Understanding the coloring rules
• Exploring the Intelligent Scrollbar
• Discovering the expert system