Capture the TCP four-way handshake data packets.
(2) Next, analyze the process of the four-way handshake. The first handshake (analyzing frame 524, determining this as the client’s initial handshake through the FIN/ACK flag)
By sending the FIN and ACK flags during the first handshake, the client indicates that the communication is complete and requests to terminate the connection
(3) Analyze the second handshake, which is frame 525
(4) Analyze the third handshake, which is frame 526
(5) Analyze the fourth handshake, which is frame 527
At this point, the TCP four-way handshake analysis is complete. I encourage you to practice and analyze it in tandem with the following diagram
