This is a static archive of our old Q&A Site. Please post any new questions and answers at

Detect missing SYN ACK or missing HTTP response



I'm basically trying to detect "incomplete" TCP or HTTP communication in a capture file.

Is it possible to display only TCP streams that consist of a SYN without a corresponding SYN ACK? Or streams with no FINs? Or to display HTTP requests that do not receive an HTTP response?

Thanks :)

asked 08 Jul '11, 11:27

aatoga's gravatar image

accept rate: 0%