Conversation completeness: Incomplete, DATA (15)

edit

WSUG: 7.5. TCP Analysis

TCP Conversation Completeness

TCP conversations are said to be complete when they have both opening and closing handshakes, ...

A value of 15 (1(SYN) + 2(SYN-ACK) + 4(ACK) + 8(DATA)) means the conversation does not have a FIN or RST closing sequence.

Chris Greer Youtube explainer: How to Use the TCP Completeness Value in Wireshark