[ale] wireshark

[JK]

Atlanta Geek wrote:
> Two questions guys.
> 1. Is there a way in wireshark that I can tell that a socket is closed.


Depends. If it's a TCP connection, you can filter the display for
RST packets. But in general, I think the answer is some combination
of "No" and "It's more trouble than it's worth".  You want netstat
and/or lsof, which are specifically designed to inform you about
your machine's network connection state(s).

-- JK