Hi Wireshark Community –
I just recently upgraded my WS to 1.2.0 and when I do look
at traces, I tend to “follow a TCP stream” and typically cut/paste
the actual stream _expression_ so that others can view the trace and cut/paste
the stream I was referring to.
It seems in this new version, it lists stream #’s, for
example “tcp.stream eq 2” – I figure this means the second TCP
stream, which is great but I prefer the old method where a “follow tcp
stream” resulted in the actual _expression_ filter but I can’t seemingly
find that option (if it does exist). Any help?
Alex