Likely to be because the packets contain a TCP RST. You can check which coloring rule is being used by expanding the frame item in the protocol details pane and looking for the [Coloring Rule Name: xxx] and [Coloring Rule String: yyy] fields to see the name and the filter string respectively causing the packet to be colored in that way.