I'm sure someone's seen this.. But did you find a fix? Getting error: FTP rule 0 reason; unknown established TCP Packet when an FTP connection tried to traverse a Checkpoint 4.1 (i know old..) system.. So, I sniffed the session. 1st. a reset is sent to the ftp deamon. 2nd. a syn, 3rd. syn/awk is recieved 4th. an awk is sent. 5th. an awk/push is recieved.. Then the connection just hangs... Any ideas?