> No, I meant a SYN with a sequence number that's within the valid window > (which is what the original question was asking). It's not a duplicate. You are exactly correct. See the bottom of page 71 of RFC793. http://www.ietf.org/rfc/rfc0793.txt John