new to wireshark and teacher hasn't responded to me, Im trying to find out how many connections(sessions) happen between two IP's. im using filter ip.src==xxx.xxx.xxx.xxx&&ip.dst==xxx.xxx.xxx.xxx&&tcp.syn==1&&tcp.ack==0 but Im pretty sure thats not what I need. any info would help asked 03 Dec '12, 12:02  EMEDINA |
One Answer:
EMEDINA, All you want to see is the number of TCP connections between two PC's? How about this: Create your display filter "ip.addr==xxx.xxx.xxx.xxx&&ip.addr==xxx.xxx.xxx.xxx" (Notice, I'm using ip.addr). Then go to "statistics" "conversations" on the Wireshark munu bar. Select the "TCP" tab and check "Limit to display filter". This should show the the number of TCP sessions between the hosts referenced in the display filter. Good luck. Owen answered 03 Dec '12, 15:54  Owen |
