Plotting TCP Receive Window using I/O Graph

edit

Well, it works, but it's still not what I'm after. I found this thread which is my source of inspiration: https://osqa-ask.wireshark.org/questi...

In that graph it's clear it's a flat line illustrating the window size, and I've tried using the same fields, but cannot get a similar graph.

O.k. But it is a littel bit different to what you want to plot. So in your case I woulld use

Display Filter: (ip.src=="ip of source")

Y-Axis: set it to Min(Y-Field)

Y-field: tcp.window_size

If you want to have it better, you need the tcptrace or scaling window graphs.

Or you can use excel.

Thanks for the suggestion. I know about the tcptrace graph, but unfortunately it's also not giving me the graph I want. Basically I want a "management friendly" graph that very clearly shows the dips in the window size when the receiver signals a TCP Receive Window of zero bytes and not something that needs a lot of explanation. I'm sure that is possible using the I/O graph, but I just can't figure it out :-)

I've naturally also tried the blatantly obvious Statistics -> TCP Stream Graphs -> Window Scaling which is actually what I want, but if I disable "Bytes Out" (which shows bytes in flight) then I cannot click on the graph and jump to the relevant packet in the capture itself. This works only on the Bytes Out graph. Not sure if this is on purpose or a bug...