Wireshark-users: [Wireshark-users] TCP SYN Filter

From: "Adam St. Onge" <adamst.onge@xxxxxxxxx>
Date: Thu, 23 Apr 2009 14:34:40 -0400

I’m working on an issue where a server is not answering TCP SYN’s due to port reuse, while the socket is still in Time_Wait on the server. I was wondering if there is a way to do a filter that would show me “tcp.flags eq 02” if there are multiples for that same socket, or if there is no corresponding Syn,Ack?

 

Thanks,

Adam