Dear Richard Sharpe, Ed Warnicke, Ulf Lamping,
Chapter 7.5 in the Wireshark User's Guide error (https://www.wireshark.org/docs/wsug_html_chunked/ChAdvTCPAnalysis.html) says:
TCP Keep-Alive
Set when the segment size is zero or one, the current sequence number is one byte less than the next expected sequence number, and any of SYN, FIN, or RST are set.
It should say:
TCP Keep-Alive
Set when the segment size is zero or one, the current sequence number is one byte less than the next expected sequence number, and none of SYN, FIN, or RST are set.
Please refer to the TCP packet dissector source code for confirmation:
https://github.com/boundary/wireshark/blob/master/epan/dissectors/packet-tcp.c#L950
Med venlig hilsen / kind regards
Morten Brørup
CTO
SmartShare Systems A/S
Tonsbakken 16-18
DK-2740 Skovlunde
Denmark
Office +45 70 20 00 93
Direct +45 89 93 50 22
Mobile +45 25 40 82 12
mb@xxxxxxxxxxxxxxxxxxxxx
www.smartsharesystems.com
