The client starts by sending a synchronization packet ( SYN) to the server it needs to connect to and waits for the server response.The TCP defines a 3-way handshake mechanism to initiate the connection. Client: This is the host that initiates the connection to the server.Server: This host is normally listening on a certain IP address and a port number waiting for connections from clients.The TCP is a connection between two hosts The Berkeley sockets API is the most common API used for TCP and you will almost find it in all major operating systems.

Also, it monitors the state of transmitted packets and tries to do retransmission for packets that are lost on the way to their destination. It will add a checksum to data and headers to ensure that the received bytes are exactly what was sent. Usually, the two hosts are named client and server and the client is the host who initiates the connection to the server.

Connection based: In TCP, a connection is established between the two communicating hosts, and the state of this connection is maintained on the two hosts.

TCP is an acronym for Transmission Control Protocol and it has the following characteristics There are many transport layer protocols, of which TCP and UDP are the most popular. How TCP connection is established and terminated (This article).Basic knowledge of how to use Wireshark is needed. This is the first article in a series that illustrates the basics of the TCP protocol and its analysis using Wireshark. HTTP, HTTPS, and FTP are only a few examples from the list. TCP is a reliable connection-based protocol that is used by many of the application layer protocols we use every day.

Reading wireshark capture