Gwenzel Registered: 06/14/06
Posts: 1
|
|
|
Reply with quote | #1 |
Trying to find where I filter in Observer for a RST. In wireshark - it is tcp.flags eq 4 But couldn't seem to find it in any of the filters in observer. FYI - Doesn't really matter for what I am looking for - but the port is LDAP.
Thanks Guy Wenzel Capella University |
| |
BillProctor
Moderator
Registered: 03/02/06
Posts: 289
|
|
|
Reply with quote | #2 | Go to the Filter dialog. There is a folder called Sample Filters. Inside of there you will find RST. This is a filter designed to filter out any RST flagged packet. You can make a copy of it and them modify the filter how you see fit.
Bill Proctor |
| |