Getting information through TCP stream graphs – the Time-Sequence (tcp-trace) window
TCP time-sequence graphs based on the UNIX tcpdump command provide us with additional data on the connection that we monitor. In addition to the standard sequence/seconds in Time-Sequence (Stevens), we also get information on the ACKs that were sent, retransmissions, window size, and more details that enables us to analyze problems on the connection.
Getting ready
Open an existing capture or start a new capture. Click on a specific packet in the capture file. Even though you can use this feature on a running capture, it is not meant for online statistics; so it is recommended that you start a capture, stop it, and then use this tool.
How to do it...
To view TCP stream graph statistics, perform the following steps:
Click on a packet in the stream you want to monitor.
Tip
The TCP stream shows a directional graph, so when you click on a packet, it should be in the direction you want to view the statistics on. If...
