Is it abnormal to received a syn, ack of win=0 ?
I see it from time to time but somebody is worried because they send a tcp ack and tcp zero probe malformed after a syn ack win=0. See shared link below
https://drive.google.com/open?id=1IhugFQND4SgDc7Q70dzhchYL6jBjZci_