Open "Follow TCP Stream", look at conversation stats (C->S and S->C). Now close the stream, click on the next packet (say the first is S->C then select C->S) and "Follow TCP Stream". The stats switch around but the hosts don't... i.e. you get a bytes count that isn't appropriate for that direction of communication. It seems FTS assumes the direction when producing the bytes count and assignes it to which ever H->H line in the drop down. -- Gordon McKinney Mobile: 07770 957 627 http://www.night-ray.com/
Powered by MHonArc 2.6.10