All sheets · Use your browser Print dialog (Ctrl P) and Save as PDF.
Z+
Wireshark, flow and performance
Request, reply, timing. Module 8 page 71 introduces traffic monitoring; pages 72–74 cover common performance.
| Topic | Remember |
|---|---|
| Display vs capture filter | Display changes the view; capture changes what was collected. |
| Open / closed / filtered | Listener; no listener observed; view obstructed. Silence is not proof of absence. |
| Wireshark vs flow vs iperf | Conversation detail; phone-bill summary; timed capacity trial. |
| Latency / jitter / loss / throughput | Late; jumpy arrival; missing; what got through. |
| Bandwidth vs utilization | Capacity versus how much is being used. A 1 Gbit/s link does not guarantee a 1 Gbit/s transfer. |
| Shaping vs policing | Shaping waits; policing enforces the limit. |
| QoS | Who goes first, not how many lanes exist. |
| Nmap -sS / -sT / -sU / -sV / -A | SYN; connect; UDP; version; several detections — not “all ports.” |