Wireshark · Wireshark-users: Re: [Wireshark-users] How does wireshark identify tcp streams?

Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] How does wireshark identify tcp streams?

From: Guy Harris <guy@xxxxxxxxxxxx>

Date: Sat, 21 May 2011 11:15:29 -0700

On May 21, 2011, at 11:12 AM, Irfan Habib wrote:

> Wireshark assigns numbers to tcp streams in a pcap file and packets can be filtered based on that tcp stream number.  My question is, what properties in a packet does wireshark use to determine which tcp stream it is part of?

Source and destination IP addresses and TCP port numbers.

Follow-Ups:
- Re: [Wireshark-users] How does wireshark identify tcp streams?
  - From: Irfan Habib

References:
- [Wireshark-users] How does wireshark identify tcp streams?
  - From: Irfan Habib

Prev by Date: [Wireshark-users] How does wireshark identify tcp streams?
Next by Date: Re: [Wireshark-users] How does wireshark identify tcp streams?
Previous by thread: [Wireshark-users] How does wireshark identify tcp streams?
Next by thread: Re: [Wireshark-users] How does wireshark identify tcp streams?
Index(es):
- Date
- Thread

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube