This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

What is the differences between tcp.stream and tcp.seq in wireshark field?

Are the packets with same tcp.stream should have same tcp.seq?(why if not?)

asked 14 Aug '17, 05:56

Zahra's gravatar image

Zahra
318913
accept rate: 0%


tcp.seq is the sequence number for the TCP header so it reflects what was actually on the wire.

tpc.stream is a wireshark generated (hence it has [] around it in the UI) value that is used to show the different tcp streams or connections in a capture.

The values will normally be different as they are entirely different things.

permanent link

answered 14 Aug '17, 06:27

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×18

question asked: 14 Aug '17, 05:56

question was seen: 1,294 times

last updated: 14 Aug '17, 06:27

p​o​w​e​r​e​d by O​S​Q​A