1 | initial version |
Likely to be because the packets contain a TCP RST. You can check which coloring rule is being used by expanding the frame item in the protocol details pane and looking for the [Coloring Rule Name: xxx]
and [Coloring Rule String: yyy]
fields to see the name and the filter string respectively causing the packet to be colored in that way.