Why is the packet line with 49313 → 8027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 red?

asked 2020-02-14 21:21:41 +0000

samwifgac
3 ●2

updated 2020-02-15 12:42:43 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23790 ●4 ●950 ●227 https://www.wireshark.org

New to Wireshark. Watching packets fly around, noticed a Red line, trying to figure out why its red and what it means.

49313 → 8027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0

Any code help/definition pages out there? Thanks

answered 2020-02-14 21:37:53 +0000

Chuckc
2858 ●5 ●567 ●19

https://www.wireshark.org/docs/wsug_h...
TCP RST can be a normal ending for a TCP/IP conversation.
I'm firmly (my $.02) in the "disable colors" camp if you are new to Wireshark.
Take some time to follow through the packets without the colors distracting you.

edit flag offensive delete link

Comments

Also note that you can see the condition causing the color to be the way it is by expanding the frame item in the packet details pane and looking at the [Coloring Rule Name: xxx] and [Coloring Rule String: yyyy] items.

grahamb ( 2020-02-15 12:45:00 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Why is the packet line with 49313 → 8027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 red?

1 Answer

Comments

Your Answer

Question Tools

Stats

Why is the packet line with 49313 → 8027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 red? edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Why is the packet line with 49313 → 8027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 red?