![wireshark logo](/images/wireshark-logo.png)
Wireshark mailing list archives
tcp conversations
From: Cristian Constantin <const.crist () googlemail com>
Date: Wed, 1 Feb 2012 12:23:21 +0100
hi! in the case that two hosts host_a and host_b are communicating using: * tcp as a transport protocol * ip addresses: ip_addr_host_a, ip_addr_host_b * tcp ports (always!): tcp_port_host_a, tcp_port_host_b and the tcp connection is NOT persistent (i.e. it is explicitly terminated and started all over again) what is wireshark supposed to display in the gui window "TCP Conversations": a. one conversation between {ip_addr_host_a, tcp_port_host_a} and {ip_addr_host_b, tcp_port_host_b} containing all the actual "incarnations of the connection" (this is the actual term used in the tcp rfc http://tools.ietf.org/html/rfc793#section-2.7) b. multiple conversations between the above (based/sorted on new ISNs) (one conversation per actual "incarnation of the connection") thanks a lot! bye now! cristian ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- tcp conversations Cristian Constantin (Feb 01)