Yes, i did, immediately. I think windows should wait 2 minutes before closing the connection, isn't it?
2007/6/15, Stephen Fisher <[EMAIL PROTECTED]>: > On Wed, Jun 13, 2007 at 10:12:03AM +0200, paul wrote: > > > I tried to use Wireshark on Windows. I catched one three way handshake > > from some foreign address on some ports greater than 1024. immediately > > I run netstat -a -n , but I cannot find any corresponding connection > > in this list. Does anybody know why ? > > You should have seen it if it was still active. Did you continue to see > traffic in Wireshark for that connection? > > > Steve > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users > _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users