I have a pcap of TCP flows. I want to know which flow last longest. So I am seeking a way to print duration of each TCP flow. Thank in advance asked 09 Mar '17, 21:19 fucai1116 |
One Answer:
Go to "Statistics - Conversations", select "TCP" and sort by "Duration" column: Then if needed you can right click on the flow, select "Apply as filter - selected - A <--> B" and see this flow in main Wireshark window. answered 09 Mar '17, 23:41 Packet_vlad edited 09 Mar '17, 23:47 |