Ethereal-dev: Re: [Ethereal-dev] Follow TCP Stream module

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Wed, 12 Jan 2005 12:37:31 -0800 (PST)
rex plantado said:
> one last question: if SYN starts a new tcp stream, what are all other
> possible flags to end a tcp stream?

The FIN flag indicates that no more data is going to be sent by the sender
of the packet with FIN.  This ends that *side* of the TCP stream, but it
doesn't necessarily end the entire connection - the other side might have
more data to send.

The RST flag indicates that the sender of the RST thinks that the packet
to which the RST is responding wasn't part of the connection on which it
was sent.

See RFC 793 for more complete information.