IP wizards

How to filter on starting  and ending sessions

To find all packets that show TCP sessions going up or down the following filter can be used.

tcp.flags&7 or (tcp.seq==1 and tcp.ack==1 and
!tcp.window_size_scalefactor==-1 and tcp.len==0)

You can add this filter as a button via the "Save" button.