["Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>]

You can apply the display filter "tcp.analysis.flags"
which will match all packets where there this field exist.
This field only exist for packets with interesting tcp properties
such as retransmissions, duplicate acks, zero windows,
acks to packets we havent seen yet,  keep-alives,
zero-window-probes, etc  

it is also possible to filter for specific tcp errors


----- Original Message ----- 
Subject: [Ethereal-users] Find TCP events


> Is there an easy way for me to get a list, or filtered version of frames 
> in a trace with TCP events (retransmissions, etc) detected by the TCP 
> sequence number analysis module?  I'm assuming that I can do this with 
> filters, but haven't been able to figure out how...
> 
> If I can do it with a filter, I'm also assuming that I can use the 
> filter with the "Find Frame" feature to find the next occurrance of an 
> event, which would also be extremely handy.
> 
> Thanks,
> Ian