hi, i face this error when i tried to get follow TCP stream ((error creating filter for this atream a transport or network layer header is needed)) please help, thanks asked 27 Jan '11, 04:12  ceve |
2 Answers:
I've never seen this before. Do you see both transport layer headers and network layer headers, IP addresses for example? answered 27 Jan '11, 05:35  Paul Stewart |
This error occurs when you have selected a frame that does not contain TCP and you try to follow-TCP-stream on it. You will have to select a TCP packet first and then use Follow-TCP-Stream to make it work. answered 27 Jan '11, 09:58  SYN-bit ♦♦ |
When I select a frame that does not contain TCP, "Follow TCP Stream" is grayed out. I can't click on it and I can't duplicate the error the OP is getting.
Good point, menu sensitivity should indeed prevent one from from trying to Follow-TCP-Stream on a non-TCP stream. This might have been broken in some way...
@ceve: Could you post the output of "Help -> About" of the Wireshark version you are using?
Sorry, typo. That should have been "I CAN'T duplicate the error the OP is getting" not "I can".
That's what I read in the first place :-) But I have corrected your original comment to prevent confusion...