Ask Your Question
0

How to filter TCP SYN that has their bits set to 1?

asked 2019-10-15 00:49:06 +0000

tada234 gravatar image

I'm trying to understand how to use filters, how would I filter to find TCP SYN with their bits set to 1?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-10-15 02:05:08 +0000

Chuckc gravatar image

updated 2019-10-15 02:05:43 +0000

You didn't specifically say display filters but will assume you're working with an existing capture.

Either of these will show frames with the SYN bit set:

tcp.flags.syn==1

or

tcp.flags & 0x02

If you want to exclude SYN/ACK frames and only show SYN use this:

tcp.flags.syn==1 && tcp.flags.ack==0
edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2019-10-15 00:49:06 +0000

Seen: 4,516 times

Last updated: Oct 15 '19