how to identify the sequence of closing TCP connection from a saved trace? asked 02 Jul '13, 10:02 Irock732 |
One Answer:
TCP connection will be closed with segments with either FIN flag set or RST Flag set.Check out the tcp segments with these Flags set to start with to identify the closing sequence. answered 02 Jul '13, 10:38 krishnayeddula edited 02 Jul '13, 10:51 |
you can use the following display filter:
Regards
Kurt