Definition of filter fin and finack

[Nick Diel]

A quick question as I work on a paper.  For the filters "fin" and "finack",
do each one represent one half of the 3-way tear down.  For example, does
"fin" mean that argus saw the first fin and saw the ACK for this fin?  And
on the other side, does "finack" mean that argus saw the second fin and saw
the ACK for this fin?  Or does a complete teardown in terms of fin and
finack filters look like this: (src fin and dst finack) and (dst fin and src
finack)?

I want to make sure I get my defitions right for a paper.

Thanks,
Nick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20080827/633db91e/attachment.html>