Time Sequence Tab

Time Sequence displays the TCP conversations in arrow style in time order. You can read these arrows to understand TCP communication and analyze the following scenarios:

Communications between two nodes.
Check if there is any TCP port scanning.
Check if there is any password decoding action via TCP.
Check if there is any worm virus attack via emails.
Check if there are too many small packets with long time communication (IM communicates with HTTP proxy).

With analyzing these diagrams, you will understand the original operations of the connections and go deeper to analyze content and steps of TCP connections.

The Time Sequence tab contains the following parts:

Toolbar

Toolbar

The following table lists all the items on the toolbar:

Sequence Number Type	Click to switch display relative or absolute sequence number. Relative sequence number will display the number of the first packet as 0 and recalculate the following packet sequence number based on it.
Refresh	Click to refresh the tab or set the refresh options.
Packet Counter	Shows the number of packets in the conversation.

Still, you can read Data Flow to get more help on TCP conversation analysis.

Back