 | 1 | initial version |
Hello,
I am trying to inspect traffic for duplicate TCP flows. When I implement the following filter, I get two different results between version 4.2.6 and version 3.4.9:
tcp.flags.syn == 1 and tcp.flags.ack==0 and tcp.analysis.out_of_order or tcp.analysis.reused_ports
on version 3.4.9, this filter displays 556 packets. on version 4.2.6, on the exact same capture, this filter displays 0 packets.
which version is correct? why is there such a huge discrepancy?
Hello,
I am trying to inspect traffic for duplicate TCP flows. When I implement the following filter, I get two different results between version 4.2.6 and version 3.4.9:
on version 3.4.9, this filter displays 556 packets. on version 4.2.6, on the exact same capture, this filter displays 0 packets.
which version is correct? why is there such a huge discrepancy?