follow_stream
Reassemble a network stream using a display filter, returning client and server addresses with base64 payload chunks and direction. Control output size with max_payloads to handle long-lived streams.
Instructions
Reassemble a stream. display_filter selects it (e.g. tcp.stream eq 3).
Returns client/server addrs and base64 payload chunks with direction.
Long-lived streams can produce huge payload lists; max_payloads caps
how many chunks are returned. Set to 0 for no cap.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| alias | Yes | ||
| protocol | Yes | ||
| display_filter | Yes | ||
| max_payloads | No |