Hi,
That is what it is intended to do, to let you zoom into all the details of that
particular TCP stream. Wireshark is made for drilling down into packets, it's
not really a statistics tool.
Why can't any of the options in the Statistics menu help you?
Thanx,
Jaap
Markus Sieber wrote:
hi,
i often need only tcp connections listed (not each packet, but each
connection), so i use
following filter:
tcp.port eq 80 and tcp.flags.syn eq 1 and tcp.flags.ack eq 0
to view the connections i right click on them and use "follow tcp
stream" but whenever i do that
my filter string gets replaced by a filter to show the packets of this
tcp stream, which is very annoying.
How can i deactivate this behaviour? or is there any other way to get a
connection overview
(in the best case with a state (open,close))
regards,
Markus
