Revision history [back]

You didn't specifically say display filters but will assume you're working with an existing capture.

Either of these will show frames with the SYN bit set:

tcp.flags.syn==1


or

tcp.flags & 0x02


If you want to exclusde SYN/ACK frames and only show SYN use this:

tcp.flags.syn==1 && tcp.flags.ack==0


You didn't specifically say display filters but will assume you're working with an existing capture.

Either of these will show frames with the SYN bit set:

tcp.flags.syn==1


or

tcp.flags & 0x02


If you want to exclusde exclude SYN/ACK frames and only show SYN use this:

tcp.flags.syn==1 && tcp.flags.ack==0