This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

[closed] Wireshark TCP SYN/FIN both set

I have downloaded a wireshark profile that has a coloring rule for tcp.flags & 0x02 || tcp.flags.fin == 1.

I'm trying to figure out what the TCP SYN (synchronize sequence numbers) and FIN (sender is finished sending data) means or how it happens.

Here's my trace.

I'm referring to frame 22 and 25.

If you can point me in the right direction for TCP documentation.

I looked at TCP Illustrated and couldn't find anything.

Or if you can answer in what case this would happen.

syn+fin tcp

asked 26 Mar '14, 10:55

gipper
30●12●12●16
accept rate: 0%

closed 26 Mar '14, 14:35

grahamb ♦
19.8k●3●30●206

Disregard this I made a mistake on a coloring rule.

(26 Mar '14, 13:51) gipper