What is the purpose of 'Follow TCP Stream' in Wireshark?

• A. It reconstructs the entire bidirectional TCP conversation for easy analysis of the application-layer data.
• B. It filters frames belonging to a TCP connection.
• C. It reorders TCP segments to correct sequence.
• D. It converts TCP traffic into HTTP immediately.

Answer: (A)

Follow TCP Stream reconstructs the entire bidirectional TCP conversation into a single, ordered view, so you can read the application-layer data as a continuous sequence. It gathers all packets from one TCP connection and reassembles their payloads in the correct order, including data from both directions, making it easy to inspect protocols like HTTP without worrying about individual segment boundaries or retransmissions. It doesn’t just filter frames or magically convert traffic to HTTP; it presents the assembled data from the conversation, which is the most useful way to analyze what the application actually exchanged.