Table of Contents

7.1. Introduction

7.2. Following TCP streams

7.2.1. The "Follow TCP Stream" dialog box

7.3. Expert Infos

7.3.1. Expert Info Entries

7.3.2. "Expert Info" dialog

7.3.3. "Colorized" Protocol Details Tree

7.3.4. "Expert" Packet List Column (optional)

7.4. Time Stamps

7.4.1. Wireshark internals

7.4.2. Capture file formats

7.4.3. Accuracy

7.5. Time Zones

7.5.1. Set your computer's time correctly!

7.5.2. Wireshark and Time Zones

7.6. Packet Reassembling

7.6.1. What is it?

7.6.2. How Wireshark handles it

7.7. Name Resolution

7.7.1. Name Resolution drawbacks

7.7.2. Ethernet name resolution (MAC layer)

7.7.3. IP name resolution (network layer)

7.7.4. IPX name resolution (network layer)

7.7.5. TCP/UDP port name resolution (transport layer)

7.8. Checksums

7.8.1. Wireshark checksum validation

7.8.2. Checksum offloading

In this chapter some of the advanced features of Wireshark will be described.