Wireshark · Wireshark-dev: Re: [Wireshark-dev] Expert item for TCP RST flag

[mmann78@xxxxxxxxxxxx]

One of the "features" that could be added now that expert items are registered/filtered is user assigned error levels for individual expert items (because certain expert scenarios may be more/less important to various users).

 

Patches welcome!

-----Original Message-----
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
Sent: Wed, Jan 8, 2014 4:15 pm
Subject: Re: [Wireshark-dev] Expert item for TCP RST flag

On 1/7/14 4:19 PM, Joerg Mayer wrote:
> Right now TCP packets with RST are marked as severity chat. Is there a reason
> why this isn't warn?

Some applications use RSTs as a way to quickly close connections.
Internet Explorer is probably the most common example.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe