Is there any way to make the "Follow TCP Stream" command not change my view filter in WireShark? When I use this, I am generally looking for a specific stream and it makes it annoying when I have to go and reset my filter after looking at each stream.
asked 07 Feb '11, 04:42
This is not possible. Wireshark needs to select the packets that belong to the stream before recreating the payload.
answered 07 Feb '11, 07:33