Wireshark-users: Re: [Wireshark-users] "Follow TCP Stream" feature question
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Prigge Scott <PriggeScottM@xxxxxxxxxxxxx>
Date: Mon, 8 Dec 2008 10:07:07 -0600
> When I select a frame in the wireshark capture and then select the "follow the TCP stream" feature for that frame; what exactly am I seeing in that "follow the TCP stream" display?
> Is the resulting display the whole TCP conversation between the two end points or is it just that one frame that I am seeing?

You are seeing all of the transmitted data based on your display filter. So if you want to limit the display to to show you only transmitted data in a specific conversation, then first create a display filter based on that conversation. Then use the "Follow TCP Stream" feature.