This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Follow multiple TCP streams

0

Is there any easy way to follow more than one TCP stream? The 'Follow TCP Stream' will decode the data asociated with a single stream, and display by itself. However I have cases where data is effectively multiplexed over multiple TCP connections, and where I'd like to arrange all the data chronologically. I can - of course - try to view each stream and correlate against packet times, but this isn't as easy and is prone to user error.

asked 02 Aug '11, 05:02

cbz's gravatar image

cbz
1111
accept rate: 0%


One Answer:

0

How about this? (tcp.stream eq i) or (tcp.stream eq j) ... where both i and j are the numbers of the two streams you're interested in.

answered 02 Aug '11, 06:02

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%