Watched a packet capture in Dallas and realized I'd been chasing ghosts for 6 months
Last Tuesday I was at our Dallas office helping a client sort out why their VoIP calls kept dropping around 2pm every day. I'd been telling them for months it was a bandwidth issue and we should upgrade their circuit, but the packet capture showed something totally different. Turns out their old 100Mbps switch was hitting a broadcast storm right when everyone came back from lunch, and the VLAN setup was a mess from a contractor job back in 2019. I felt like an idiot because I'd been pushing a $2,400 circuit upgrade when the real fix was a $180 managed switch and two hours of config work. The tip off was when I finally looked at the actual traffic instead of just watching the utilization graph. Now I always pull a capture before I recommend hardware. Has anyone else gotten burned by trusting a dashboard instead of looking at the raw traffic?
Been there man. Started pulling a 10 minute capture on every trouble ticket now (even the ones that look obvious) and it's saved me from buying stuff we didn't need at least three times. Cheap Wireshark box on a span port beats guessing every time.