From the course: Wireshark Essential Training

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Recognizing the TCP connection process

Recognizing the TCP connection process - Wireshark Tutorial

From the course: Wireshark Essential Training

Start my 1-month free trial Buy for my team

Recognizing the TCP connection process

“

- [Instructor] Transmission Control Protocol is a connection-oriented protocol. It begins with a three-way handshake and ends by terminating the session. A three-way handshake begins by the client sending a SYN packet to the server. That SYN packet synchronizes the sequence numbers. If the server accepts, it responds by a synchronization acknowledgement. The client then sends a final acknowledgement and then we have a connection. A socket is created and we can begin to exchange data. Periodically, services will be refused, and then you'll see a reset. No response may indicate a firewall. You may receive an ICMP destination unreachable packet, and a code might indicate the network was unreachable or the host was unreachable, but most likely the target port was firewalled. The host might try again with another SYN packet. The connection can be terminated in one of several ways. The connection can time out and will be closed…

Contents