Hi All,
Could you please tell why I see duplicate stream IDs in Conversations dialog:
These streams have even different IPs and ports. If I filter by this stream ID, I get both streams. Strangely enough, when I set "Assume packets have FCS to "Always"", streams are not duplicated anymore (this PCAP does NOT have FCS included).
Wireshark version:
Thanks for any hint!
Vlad
When h225 protocol is enabled, the conversation tables are different.
There was something similar with SNMP (9123: SNMP/UDP: SNMP is walking on UDP conversation/stream ID).
If I don't find a fix soon, will open an issue to track this and post a link to it here.
Asked: 2022-12-14 14:38:44 +0000
Seen: 148 times
Last updated: Dec 18 '22
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
Can you share the profile? Are there any
Packets B -> A?Hi Chuck,
1) It's just default profile + Stream ID column added: https://drive.google.com/file/d/14xAk...
2) I see that one stream is separated to 2 unidirectional IDs? See for example ID 9 + ID 10, same 5-tuple if I'm not missing something.
I was unable to recreate but my "Default" profile looks a lot like my desk - messy.
Will create a clean profile and try again. :-)
Yes - I was guessing but adding up the packet counts I could see in your screen shot resulted in the totals I was seeing here.