Filter for individual file name (case sensitive)</br> <strong>smb2.filename contains "manifest.xml"</strong>

Wireshark mesuring response time of protocols like HTTP and SMB

The importance of the TCP dissector to reassemble TCP Streams

Filter for SMB2 using regex</br> <strong>smb2.tree matches "[sS]pace[oO]ps"</strong>

Locate broadcast for each new passenger:</br><strong>udp.port == 33333</strong>

Filter for exact name of SMB2 Tree (case blind)</br> <strong>smb2.tree contains "SpaceOps"</strong>

tcp.stream == 18 and (smb or smb2)

alternate to smb.cmd Negotiate Protocol (smb offest byte 4 = 0x72) smb[4]==0x72

High Latency

Packet loss

Applications

Bad Application Design

It's always DNS

Not caching DNS replies

Very low throughput between client and server

slow database interaction

Query timing out

Not aggregating Passenger lookups- executing only one lookup at a time

small windowsize