johns287's profile - activity

Thanks! I'll make a request on the Gitlab site to change this feature to order the hosts according to the 3 way handshak

When viewing TCP conversations, the flow appears backwards. I would expect "Address A" to be the source and "Address B" to be destination like it is most of the time. In both examples, I captured TCP SYN & SYN ACKs, but one example shows the correct direction and the other is reversed.

Edit: links to files at the bottom. I also found another example with the same source and dest as the backwards example which shows correctly. My thought is that Wireshark is seeing the source port higher than the destination port so it orders them as such.

Win10 x64 Wireshark Version 3.2.7 (v3.2.7-0-gfb6522d84a3a)

Backwards:

Correct:

Edit: Correct with same source and dest as the backwards one:

Backwards cap: https://www.dropbox.com/s/wpeyc0nui6i...

Not backwards cap: https://www.dropbox.com/s/3as7qeabusy...

Not backwards with same src/dst as original: https://www.dropbox.com/s/0nxed4bwb87...

Why are some TCP conversations shown backwards/reversed? When viewing TCP conversations, the flow appears backwards. I w

Thanks. I edited the original post with the files. I also found another example with the same source and dest as the bac

Why are some TCP conversations shown backwards/reversed? When viewing TCP conversations, the flow appears backwards. I w

Why are some TCP conversations shown backwards/reversed? When viewing TCP conversations, the flow appears backwards. I w