This solution brief recounts how network analyst Ray Tompkins used ProfiShark 10G and Wireshark to resolve months of intermittent latency, high ping times, slow connections, and sluggish switch access. Because the affected switch was already overloaded, using a SPAN port could have worsened the problem. ProfiShark was inserted into a 10G switch-to-switch link to capture complete traffic without impacting production. Initial traces appeared normal until the analysis included MAC-address information. The capture revealed a compromised computer sending ARP broadcasts at near wire speed while impersonating the default gateway. Calculations showed approximately 260,417 packets per second, forcing every device in the broadcast domain to process the traffic. ProfiShark supplied the packet-level e

Join for free to read