|Main Archive Page > Month Archives > wireshark-users archives|
On May 21, 2011, at 11:12 AM, Irfan Habib wrote:
> Wireshark assigns numbers to tcp streams in a pcap file and packets can be filtered based on that tcp stream number. My question is, what properties in a packet does wireshark use to determine which tcp stream it is part of?
Source and destination IP addresses and TCP port numbers.
Sent via: Wireshark-users mailing list <email@example.com>