On Thu, Dec 05, 2002 at 11:09:55PM -1000, Dustin Cross wrote: > S/SA only checks the SYN and ACK flags (making sure ACK is not > set) and completely ignores the FIN, URG, PSH and RST flags, > that is how a FIN scan could get by. I parsed S/SA as SA. I stand corrected. Thanks, -Vince