Pretending TCP port zero is a normal one

why do i have this far off feeling that there's another winnuke style attack lurking in this...