Skip to content

Glossary: Monitoring Tools and the Identity Life Cycle

TCP flags

Also written: SYN, ACK, PSH, FIN, flags

Markers in TCP packets: SYN opens a connection, ACK acknowledges, PSH pushes data and FIN closes. SYN-only flows to many ports suggest a port scan.

Where the book teaches it

Related terms

TCP (Transmission Control Protocol)Port scanFlow record