From: An approach to application-layer DoS detection
TCP flag
Description
ACK
Acknowledge of a packet
FIN
Finished send more
URG
Urgent packets
PSH
Process packets no buffering
RST
Reset connection
ECE
Explicit congestion notification
CWR
Congestion window reduced
NS
Nonce sum