TCP-UDP Display Filters Flashcards

1
Q

TCP Ports

A

tcp.port == x

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

UDP Ports

A

udp.port == x

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

TCP ACK RTT

A

tcp.analysis.ack_rtt > 1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

TCP Length: > x < y

A

tcp.len > x && tcp.len < y

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

TCP Acknowledgement

A

tcp.ack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

SEQ/ACK analysis

A

tcp.analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

ACKed segment that wasn't captured (common at capture start)

A

tcp.analysis.ack_lost_segment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

TCP window specified by the receiver is now completely full

A

tcp.analysis.window_full

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

TCP window update

A

tcp.analysis.window_update

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

TCP Zero Window segment

A

tcp.analysis.zero_window

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

TCP Connection reset (RST)

A

tcp.connection.rst

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Connection establish acknowledge (SYN+ACK)

A

tcp.connection.sack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Connection establish request (SYN)

A

tcp.connection.syn

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
TCP Flags
Syn
Reset
Push
Fin
A

tcp. flags.syn
tcp. flags.reset
tcp. flags.push
tcp. flags.fin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly