Use the filter

   "tcp.flags.fin eq 1 or tcp.flags.reset eq 1"

You should see a four way handshake, with one FIN from each side followed by an ACK from the other.

Ultime modifiche: martedì, 24 marzo 2015, 21:32