ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Patch to packet-tcp.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Tomas Kukosa <tomas.kukosa@xxxxxxxxxxx>
Date: Mon, 09 Aug 2004 08:06:48 +0200
Guy Harris wrote:
On Fri, Aug 06, 2004 at 08:37:58AM +0200, Tomas Kukosa wrote:

The attached patch contains a new TCP flag to control whether the RST
packet contains cause text or regular data.


So when would a RST packet contain regular data?

When abortive close is used and there are some data in outgoing buffer.
Then data and RST flag are sent together in one IP packet.

See e.g. http://java.sun.com/security/javaone/2003/2240-Networking.pdf page 12.