Re: Expert item for TCP RST flag

[mmann78 () netscape net]

One of the "features" that could be added now that expert items are registered/filtered is user assigned error levels 
for individual expert items (because certain expert scenarios may be more/less important to various users).

Patches welcome!


-----Original Message-----
From: Gerald Combs <gerald () wireshark org>
To: Developer support list for Wireshark <wireshark-dev () wireshark org>
Sent: Wed, Jan 8, 2014 4:15 pm
Subject: Re: [Wireshark-dev] Expert item for TCP RST flag


On 1/7/14 4:19 PM, Joerg Mayer wrote:
> Right now TCP packets with RST are marked as severity chat. Is there a reason
> why this isn't warn?

Some applications use RSTs as a way to quickly close connections.
Internet Explorer is probably the most common example.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

 

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe