Uses for Follow >> TCP/UDP Stream
hi , what is the use of Follow >> TCP/UDP Stream while analyzing pcap file and what are most use cases ?
add a comment
Follow specific stream to see TCP handling issues like Selective ACKnowledgements.
Presumably meaning "use Follow TCP Stream to filter out all packets except for the one in the stream", i.e. using "Follow TCP Stream" for the side-effect of filtering traffic. (Wireshark should have a way to show conversations and let you click on one to filter out everything except for that conversation, or to pop up a context menu on a packet and filter on the conversation(s) to which it belongs.)
Read the content of a HTTP request. Not as useful as it used to be.
Because there's less HTTP-over-TCP than there used to be, for example (i.e., more and more is HTTP-over-TLS).
