First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Follow Stream error message

I'm not sure how to post a question. The search bar says to ask your question there, and it brings up topics, not of which address my issue, but it doesn't give an option to actually ask my question after I've finished the search. I found this link though burried deep in the FAQ and not sure if this is the correct way to ask a question, but here we go:

I'm using Wireshark Version 2.6.3

I went to statistics, conversations, and found a TCP row. It shows the IP address of the website I visited, and port 80.

When I highlight the row, then click on Follow Stream, instead of allowing me to follow the stream it brings up an error message.

The error message says "Error following stream. Please make sure you have a TCP packet selected."

I did select a TCP packet, so I'm not sure why it is issuing the error message??

Thanks

Megaladon's avatar
1
Megaladon
asked 2018-09-28 18:36:51 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

It references to the fact that the packet list should have a TCP packet selected. Otherwise it seems not possible to filter (using tcp.stream eq <stream number>) the selected TCP stream in the conversation list. Same goes for UDP packets and UDP streams.

I'm not sure where the limitation comes from, I would consider it a bug.

Jaap's avatar
13.7k
Jaap
answered 2018-09-28 20:18:58 +0000, updated 2018-09-28 20:19:22 +0000
edit flag offensive 0 remove flag delete link

Comments

Is there another way to follow a stream, other than going to statistics, then conversations?

What about from the packet list? I tried right clicking on a tcp packet, but no context menu option to follow stream. I clicked on tools, where the wireshark book chapter 7.2 on protocol streams says there should be an option to follow streams.

I tried the statistics/conversation method on a different file, and it did work this time, but came up with a totally blank page.

I hope someday I'll be able to follow a stream

Megaladon's avatar Megaladon (2018-09-28 21:26:27 +0000) edit

(Converted your answer to a comment to the answer, because this is not a regular forum, but a Q&A site)

What you can do is select a TCP packet in the packet list first (any TCP packet will do) then go to Statistics | Conversations, select a TCP conversation and click Follow stream... . That should work.

Another way is to select a TCP packet in the packet list of the stream you are interested in, then go to Analyse | Follow | TCP stream.

Jaap's avatar Jaap (2018-09-29 07:24:47 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer