I found the display filter for tcp retransmissions but is there a capture
filter for this? I am troubleshooting net congestion issues on our citrix
server and thought that this might be a good filter to use. I wanted to run
wireshark all day but didn't want too deal with loading a huge file.
Paul Jacobs wrote:
I found the display filter for tcp retransmissions but is there a capture
filter for this?
No - libpcap's capture filter mechanism doesn't support any form of
state kept between packets; each packet is treated independently from
previous packets, so it'd be impossible for
