Ethereal-users: Re: [Ethereal-users] What does the flag [FIN, PUSH, ACK] mean????

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Jack Jackson <jack@xxxxxxxxxxxxxxx>
Date: Wed, 15 Sep 2004 10:11:31 -0700
At 09:08 AM 9/15/2004, Jorge Cuevas wrote:


Hi!!
I have a problem with my network.
I have sniffed both sides of a device belonging to my network. I have found
that from one side,  i have an entire conversation (webmail message
downloading) that ends correctly, ACK, FIN-ACK, ACK, FIN-ACK.
I can't tell if that is correct since you haven't specified which messages are sent and which are received. The normal termination sequence for a TCP connection when all data has been sent is 3 messages: 

-> FIN [ACK]
<- FIN ACK (ACK of the FIN, may be sent in a separate message)
-> ACK (of the FIN)


The strange thing is that from other side, i have not such packets,
moreover, i have a packet with a flag [FIN, PUSH, ACK].


PUSH is irrelevant if no data other than FIN is being sent.