Ask Your Question
0

stream vs session vs conversation

asked 2024-08-16 14:32:10 +0000

LSJR gravatar image

Hello,

I am wondering if there is any distinction between stream vs session vs conversation? I cannot seem to find anything on the internet to answer that question.

Thanks in advance

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
0

answered 2024-08-16 14:53:54 +0000

SYN-bit gravatar image

Nothing as ambiguous as the word session, as it could be seen from the user perspective, the application perspective, the network perspective. So any time this word is used, it is important to determine the context. The same goes for words as stream and conversation.

In Wireshark, the word stream is used in context of a protocol to give packets the same stream number when they have matching criteria at a certain protocol level. For instance tcp.stream is bound by the start (SYN) and finish (FIN or RST) of packets that have matching IP addresses and ports. So the same 5 tuple (addresses, ports and protocol (=TCP in this case)) could be used by multiple tcp streams, as port numbers can be re-used over time.

For UDP with no session start or end, all packets with the same IP addresses and ports get the same udp.stream number, even though they could be different sessions from the application perspective (think of DNS requests and responses, each req/resp combo is a session, however, if later on the same port numbers are used, it ends up with the same stream number).

In short, there is no definitive answer and you should check the context for understanding how these words are used when they are used :-)

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2024-08-16 14:32:10 +0000

Seen: 77 times

Last updated: Aug 16