Which action displays the conversation in a human readable format with client requests in red and server responses in blue?

• A. Right click -> Follow UDP Stream
• B. Right click -> Follow TCP Stream
• C. Analyze ->Follow -> HTTP Stream
• D. Analyze -> Decode As

Answer: (B)

Reconstructing the TCP conversation is what this action emphasizes. When you choose Follow TCP Stream, Wireshark collects every packet that belongs to the same TCP connection, orders them, and presents the entire dialogue as a single, readable transcript of the application-layer data. This view makes it easy to see who sent what, in what order, and to read the actual requests and responses as they happened.

The window distinguishes the two sides of the conversation by labeling data from the client and from the server, typically showing client messages in red and server messages in blue. That color-coding quickly highlights the flow: requests from the client followed by responses from the server, all in one place.

Accessing this view is straightforward: right-click a TCP packet and select the option to Follow TCP Stream. While other follow options exist (such as for UDP or HTTP-specific streams), the TCP Stream view provides the complete, color-coded dialogue for a TCP-based conversation, which is exactly what the question describes.