Wireshark-users: [Wireshark-users] Filter for Unanswered SYN's

From: "St Onge,Adam" <ASTONGE@xxxxxxxxxxxxx>
Date: Thu, 23 Apr 2009 09:24:39 -0400

I’m working on an issue where a server is not answering TCP SYN’s due to port reuse, while the socket is still in Time_Wait on the server. I was wondering if there is a way to do a filter that would show me “tcp.flags eq 02” if there are multiples for that same socket, or if there is no corresponding Syn,Ack?

 

Thanks,

Adam

 

==============================================================================
This communication, including attachments, is confidential, may be subject to legal privileges, and is intended for the sole use of the addressee. Any use, duplication, disclosure or dissemination of this communication, other than by the addressee, is prohibited. If you have received this communication in error, please notify the sender immediately and delete or destroy this communication and all copies.