I did'nt work with Wireshark but now I should answer a question. When I captured a traffic between my host and different pages of a site, how can I get only the number of TCP connections and the corresponding durations?
asked 21 Oct '17, 14:45
The conversations tool: under
Statistics -> Conversations
you will have a TCP tab that contains each TCP connection and the start/duration. Note that you can apply display filter in the main packet pane and then select the check box for
Limit to Display Filter
to only roll up what is currently displayed. This is often useful on a mirror port where you are only interested in two hosts, or whatever.
answered 21 Oct '17, 17:23