ECSA v10: EC-Council Certified Security Analyst v10

A FIN-only probe sent to an open TCP listening port is silently discarded because it is not a valid connection-opening segment. In contrast, a closed port responds with a TCP RST, so the absence of a response indicates an open port (or, in practice, possibly filtering).