What is the differences between tcp.stream and tcp.seq in wireshark field? Are the packets with same tcp.stream should have same tcp.seq?(why if not?) asked 14 Aug '17, 05:56  Zahra |
One Answer:
tcp.seq is the sequence number for the TCP header so it reflects what was actually on the wire. tpc.stream is a wireshark generated (hence it has [] around it in the UI) value that is used to show the different tcp streams or connections in a capture. The values will normally be different as they are entirely different things. answered 14 Aug '17, 06:27  grahamb ♦ |
