TCP close 2-way handshake with wirshark package

Question

I got a pcap package use tcpdump command. In this pcap, the TCP close in 2-way handshake!

tcp close 2-way handshake

Questions:

In this picture, can anyone determine who initiated the signal to close the connection?
why TCP close in 2-way handshake? it does not make sense!

I would ask this question there: https://networkengineering.stackexchange.com/questions/tagged/wireshark — Marged, May 15 '18 at 03:49

score 2 · Accepted Answer · answered May 15 '18 at 04:21

2

This is only a half-close, initiated by the side that sent the FIN. A full close would require a FIN in the other direction, and a corresponding ACK.

answered May 15 '18 at 04:21

user207421

1 Answers1