asked 23 Jan '17, 20:41 Adi321 |
One Answer:
Wireshark comes with a default set of colouring rules. TCP resets for example are marked red. TCP retransmits are marked black. Both (retransmits, resets) are pretty common for Internet traffic. There are discussions in the Wireshark community if the default colouring rules are helpful or not for a newbie. You can use both events to learn how TCP works. answered 24 Jan '17, 01:19 Uli |
Thank You :)