 | 1 | initial version |
TCP Conversation Completeness
TCP conversations are said to be complete when they have both opening and closing handshakes, ...
A value of 15 (1(SYN) + 2(SYN-ACK) + 4(ACK) + 8(DATA))
means the conversation does not have a FIN or RST closing sequence.
Chris Greer Youtube explainer: How to Use the TCP Completeness Value in Wireshark
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
