Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

You didn't specifically say display filters but will assume you're working with an existing capture.

Either of these will show frames with the SYN bit set:

tcp.flags.syn==1

or

tcp.flags & 0x02

If you want to exclusde SYN/ACK frames and only show SYN use this:

tcp.flags.syn==1 && tcp.flags.ack==0

You didn't specifically say display filters but will assume you're working with an existing capture.

Either of these will show frames with the SYN bit set:

tcp.flags.syn==1

or

tcp.flags & 0x02

If you want to exclusde exclude SYN/ACK frames and only show SYN use this:

tcp.flags.syn==1 && tcp.flags.ack==0