is it possible to graph number of established tcp connections in to the endpoint using IO graph in wireshark? We can graph number of TCP.SYN or TCP.FIN/RST packets but don't know how to create graph with establised sessions.
asked 17 Aug '16, 01:16
No. With the IO Graph you can plot only value of fields or count fields. You can´t graph session states, if there is no field in Wireshark.
So from my Point of view you have different options to do that kind of Graph:
I have done this once with Excel.
answered 18 Aug '16, 13:13
edited 18 Aug '16, 13:16