Hello Bao... > below is function tcp_v4_send_synack's comments. > I think it should be "having received an SYN", am I > right? > > /* > * Send a SYN-ACK after having received an ACK. > * This still operates on a open_request only, not on > a big > * socket. > */ > static int tcp_v4_send_synack(struct sock *sk, struct Yes, I think you are correct. From what I read on phrack (yeah, sometimes we need to read hacker's magazine :) ), the sequence of 3 way handshake is: - SYN - SYN-ACK -ACK So, SYN-ACK is a response to SYN...not ACK. regards Mulyadi -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/