Like most people I imagine, I have a frame number column in my preferred view. I also frequently use the very handy tcp.stream filter to isolate a particular connection. I have noticed that when I do this, I often would like the frame number to be relative to the stream I am filtered on. But the frame number column seems to be "absolute", so there are gaps in the sequence of frame numbers if there is more than one stream in the trace file. Is there a "relative frame number" column I'm just not aware of that I could add to my view so that packets in a given stream are numbered relative to the stream? Thanks! asked 02 Jun '16, 06:23  smp edited 02 Jun '16, 06:24 |
One Answer:
I don't think Wireshark keeps a relative frame number per TCP conversation as a field, so you can't display it in a column. You might want to add a feature request at https://bugs.wireshark.org for this. answered 02 Jun '16, 06:30  Jasper ♦♦ |
Thanks for the confirmation!
For reference, here's the bug report URL:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12491
As far as I can tell the next dev builds will already have that feature.