Wireshark-dev: Re: [Wireshark-dev] Expert item for TCP RST flag
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Tue, 07 Jan 2014 17:09:11 -0800
On 1/7/14 4:19 PM, Joerg Mayer wrote:
> Right now TCP packets with RST are marked as severity chat. Is there a reason
> why this isn't warn?

Some applications use RSTs as a way to quickly close connections.
Internet Explorer is probably the most common example.