In the Mezzmo log I look for the get /content/ requests to see file requests from the Mezzmo server then I look for the http-get keyword after this which is written at the time the connection is closed. I am familiar with Wireshark but it contains too much information to be able to isolate what is causing the disconnections.