1 | initial version |
TCP Conversation Completeness
TCP conversations are said to be complete when they have both opening and closing handshakes, ...
A value of 15
(1(SYN) + 2(SYN-ACK) + 4(ACK) + 8(DATA))
means the conversation does not have a FIN
or RST
closing sequence.
Chris Greer Youtube explainer: How to Use the TCP Completeness Value in Wireshark