Home

Vadim Zakharine wrote a great lua script to display additional TCP stats in both Wireshark and tshark. https://www.linkedin.com/in/vadim-zakharine-bb55922/. He is fine tuning it and needs to know your thoughts on empty columns in tshark.  Let's say that a certain TCP conversation contains no frames with Rst bit set. Is it better to keep RstA and RstB still visible and set to 0 in the protocol tree, or is it better to not display them at all?

Vadim Zakharine wrote a great lua script to display additional TCP stats in both Wireshark and tshark. https://www.linkedin.com/in/vadim-zakharine-bb55922/.  He is fine tuning it and needs to know your thoughts on empty columns in tshark.  Let's say that a certain TCP conversation contains no frames with Rst bit set. Is it better to keep RstA and RstB still visible and set to 0 in the protocol tree, or is it better to not display them at all?
38 views
23 responses
1 upvotes
Hide the column - more efficient use of screen space59%
Show the column - need to see the zeros, nothing is still something41%
Related Tags