jep right, didnt think so far ;)
then i think this phenomen is neither explainable nor believeable.
if a connection is going to be established
first SYN is sent
SYN,ACK is received
and ACK will be answered
(TCP three-way handshake)
i dont know any case where TCP-connections are established(!)
in other way
__
Georg
I would hope not - both the Source Port and the TCP ID number should be
different for the two connections, and since these are both included in the
LOG output from netfilter, the messages would not be identical...
Antony.