The follow TCP stream feature, discussed in brief earlier in the book, is a very helpful feature that can help you with an in-depth understanding of the TCP flows that are captured when you monitor the network. In this recipe, we will see some of its advantages.
HTTP flow analysis
Getting ready
Port-mirror the device or link you want to monitor and start packet capture.
How to do it...
To open the Follow TCP Stream window, perform the following steps:
- Right-click on one of the packets in the stream you want to view.
- The stream you choose is filtered by the Wireshark....