tag:blogger.com,1999:blog-25010298.post-42533235455307023982007-10-25T11:59:00.000-07:002007-10-25T11:59:00.000-07:002007-10-25T11:59:00.000-07:00Yeah, I'd definitely agree that out or order packets are likely rare, though I don't have strong figures to prove this. An aggressive IDS could definitely signature on this behavior as potentially bad. Transmitting data as part of the initial SYN falls into a similar category -- it's valid, but uncommon. Still, it's definitely an option :)skapehttp://www.blogger.com/profile/16314095165651222279noreply@blogger.com