centos 5.1: 15:37:05.553266 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: S 3436638979:3436638979(0) win 5840 15:37:05.581441 IP ftp1.XXXX.com.ftp > 74.201.XXX.XXX.45467: S 1085275456:1085275456(0) ack 3436638980 win 16384 15:37:05.581622 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: . ack 1 win 46 seven minutes later it repeats Trustix 2.2: 15:46:48.921699 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: F 1:1(0) ack 1 win 46 15:46:49.146782 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: F 1:1(0) ack 1 win 46 15:46:49.602790 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: F 1:1(0) ack 1 win 46 15:46:50.514817 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: F 1:1(0) ack 1 win 46 15:46:52.338883 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: F 1:1(0) ack 1 win 46 15:46:55.986903 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: F 1:1(0) ack 1 win 46 15:46:57.541762 IP 74.201.XXX.XXX.54565 > ftp1.XXXX.com.ftp: S 3908408499:3908408499(0) win 5840 15:46:57.569689 IP ftp1.XXXX.com.ftp > 74.201.XXX.XXX.54565: S 1255203292:1255203292(0) ack 3908408500 win 16384 15:46:57.569868 IP 74.201.XXX.XXX.54565 > ftp1.XXXX.com.ftp: . ack 1 win 5840 15:46:57.599633 IP ftp1.XXXX.com.ftp > 74.201.XXX.XXX.54565: P 1:71(70) ack 1 win 16384 15:46:57.599820 IP 74.201.XXX.XXX.54565 > ftp1.XXXX.com.ftp: . ack 71 win 5840 15:47:01.089480 IP 74.201.XXX.XXX.54565 > ftp1.XXXX.com.ftp: F 1:1(0) ack 71 win 5840 15:47:01.116652 IP ftp1.XXXX.com.ftp > 74.201.XXX.XXX.54565: . ack 2 win 16384 15:47:01.117268 IP ftp1.XXXX.com.ftp > 74.201.XXX.XXX.54565: F 71:71(0) ack 2 win 16384 15:47:01.117393 IP 74.201.XXX.XXX.54565 > ftp1.XXXX.com.ftp: . ack 72 win 5840 15:47:03.283064 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: F 1:1(0) ack 1 win 46 15:47:17.875621 IP 74.201.XXX.XXX.45467 > ftp1.XXXX.com.ftp: F 1:1(0) ack 1 win 46