This field is one that I am looking at more and more in my network and application analysis. The TCP completeness field can help when finding scans, unused connections, or resets. Here is a link to the pcap I use in the video - https://packetpioneer.com/wp-content/uploads/tcp-completeness-chrisgreer.pcapng.zip Link to the Wireshark TCP Analysis writeup - https://www.wireshark.org/docs/wsug_html_chunked/ChAdvTCPAnalysis.html Want some hands on with TCP? Consider taking one of my courses. == More On-Demand Training from Chris == ▶Getting Started with Wireshark - https://bit.ly/udemywireshark ▶Getting Started with Nmap - https://bit.ly/udemynmap == Live Wireshark Training == ▶TCP/IP Deep Dive Analysis with Wireshark - https://bit.ly/virtualwireshark == Private Wireshark Training == Let's get in touch - https://packetpioneer.com/product/private-virtual-classroom/