On Wed, Jun 13, 2007 at 10:12:03AM +0200, paul wrote: > I tried to use Wireshark on Windows. I catched one three way handshake > from some foreign address on some ports greater than 1024. immediately > I run netstat -a -n , but I cannot find any corresponding connection > in this list. Does anybody know why ?
You should have seen it if it was still active. Did you continue to see traffic in Wireshark for that connection? Steve _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users