Which of the following is considered as one of the most reliable forms of TCP scanning?