Is there a field for a "bytes in flight" in Wireshark? How do we calculate or add a field for bytes in flight for each packet on Wireshark? asked 28 Feb '17, 08:53  armodes |
One Answer:
Yes, the field is named The easy way to display this is to open a capture file, select a TCP packet other than one of the three initial handshake packets, expand the TCP details in the packet details pane, expand the SEQ/ACK Analysis item and then right click the [Bytes in flight: xxx] item and select "Apply As Column" from the context menu. answered 28 Feb '17, 09:17  grahamb ♦ edited 28 Feb '17, 09:25  cmaynard ♦♦ |
The protocol preference "Analyze TCP sequence numbers" should be enabled to use "bytes_in_flight".
@Uli,
Good spot, the TCP preference "Track number of bytes in flight" also needs to be enabled.