Wireshark · Ethereal-dev: [Ethereal-dev] Re: Conversation list -> incorrect TCP connection direction

[Jean-Baptiste Marchand <Jean-Baptiste.Marchand@xxxxxx>]

* Jean-Baptiste Marchand <Jean-Baptiste.Marchand@xxxxxx> [17/04/04 - 23:44]:

> I though that in the TCP conversation, EP1 was supposed to represent the
> source address and EP2 the destination address (i.e, EP1 is the host
> that connects to EP2) but in the attached capture, that's not the case?

Well, I think I've understood why...

It seems that we decide to name EP1 the host that sends more bytes and
EP2, the host that receives less bytes.

I suppose I need to understand the difference between a TCP connection
and a TCP conversation :)

Jean-Baptiste Marchand
-- 
Jean-Baptiste.Marchand@xxxxxx
HSC - http://www.hsc.fr/