Re: Expert item for TCP RST flag

[Gerald Combs <gerald () wireshark org>]

On 1/7/14 4:19 PM, Joerg Mayer wrote:
> Right now TCP packets with RST are marked as severity chat. Is there a reason
> why this isn't warn?

Some applications use RSTs as a way to quickly close connections.
Internet Explorer is probably the most common example.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe