What does the attribute 'Flows' of TCP stream mean in Statistics-Conversations ?
In Statistics-Conversations-TCP, we can see the statistical information of each TCP stream. For each stream entry, the last feature is 'Flows'. What does 'Flows' mean here, and why one stream can contain considerable 'Flows', like 60?
I found one explanation stating that the same 5 tuples, {src_ip, src_port, dst_ip, dst_port, protocol}, define the same flow. However, in the traffic set I captured, there are only two kind of IP addresses(192.168.5.20 for the client and 183.131.147.18 for the server), ports(53775 for the client and 443 for the server) and protocols(TCP and TLSv1.3). If flows are defined by the 5 tuples, there should theoretically be only 2^5=32 kinds flows theoretically, but in pratice, there are 60.
I would be greatly appreciated it if you could explain the actual definiation of 'flow' and 'stream' and their differences in Wireshark. Thank you very much.
