On 5/2/05, Peter Allgeyer <allgeyer at web dot de> wrote:
> Am Sonntag, den 01.05.2005, 23:14 -0500 schrieb Zach Lowry:
> > May  1 22:57:57 192.168.0.1 ipmon[130]: 22:57:57.289976 sis1 @0:31 b
> > 192.168.0.2,41262 -> 83.149.110.1,80 PR tcp len 20 52 -AF IN
> 
> This is a blocked IP packet with tcp options set (FIN, ACK). It's surely
> no outgoing _request_. The above tcp packet wants to close a tcp
> connection (or -- more unlikely -- answers to a closing request from 

How do you know that the FIN, ACK are set ? Links to detailed sources
of info would be nice..

TIA 

sai