Yes, i did, immediately. I think windows should wait 2 minutes before
closing the connection, isn't it?
2007/6/15, Stephen Fisher <stephentfisher@xxxxxxxxx>:
On Wed, Jun 13, 2007 at 10:12:03AM +0200, paul wrote:
> I tried to use Wireshark on Windows. I catched one three way handshake
> from some foreign address on some ports greater than 1024. immediately
> I run netstat -a -n , but I cannot find any corresponding connection
> in this list. Does anybody know why ?
You should have seen it if it was still active. Did you continue to see
traffic in Wireshark for that connection?
Steve
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users