Hamish Marson <hamish@travellingkiwi.com> writes: > But does nmap generate the packets WITHOUT the SYN flag set? Which is > what these are... In this case, it's probably backscatter. Could you tell us a few source/destination pairs? I could have a look at our flow database at work and look for similar incidents.