This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Follow TCP Stream troubleshooting

0

I have just installed the latest Wireshark on my Macbook Pro. I want to analyze some pcaps that were sent to me. I can open the pcap files just fine, and all looks normal on the screen. However, when I go to filter on 'TCP' and apply the filter, nothing happens. Moreover, when I right-click on the row/packet I am interested in, nothing happens.

Any thoughts or ideas are appreciated.

asked 21 Jan '14, 16:18

slinky's gravatar image

slinky
11●1●1●2
accept rate: 0%

One Answer:

0

when I go to filter on 'TCP' and apply the filter, nothing happens.

well, if the first few frames (the ones visible in Wireshark) are all TCP, you won't see any difference if you apply the display filter: tcp ;-) Is that the case?

Moreover, when I right-click on the row/packet I am interested in, nothing happens

What does that actually mean? Don't you get a pop-menu where you can select "Follow TCP Stream" (and other options)?

If so, here are some questions

  • what is your OS version
  • what is your Wireshark version
  • is there anything special on your system, like swapped mouse button, etc.?

Regards
Kurt

answered 24 Jan '14, 07:53

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

edited 24 Jan '14, 07:54