Hi Jason,
you wrote:
SYN-ACK-PSH is not a valid response to a SYN packet. you will never
What does make you think so? I can not find any hint in RFC973 and RFC1211 saying so.
IMO it is a perfectly valid reply, even if it a rather unusual one and might be a case for applying a normalization (here removing the PSH flag and any data) on it.
Michael
