On 8/01/14 12:09 , Gerald Combs wrote:
> On 1/7/14 4:19 PM, Joerg Mayer wrote:
>> Right now TCP packets with RST are marked as severity chat. Is there a reason
>> why this isn't warn?
>
> Some applications use RSTs as a way to quickly close connections.
> Internet Explorer is probably the most common example.
A host will also send a RST when it gets more data after it has send a
FIN. (But this might be the specific TCP stack I have seen this
behaviour on)
TCP RST is not something I'm worried about.
Edwin