Syn Flood Alert

Challenge Question

The network team flagged unusual traffic hitting an internal host and pulled a capture during the incident. Buried inside a storm of spoofed, inconsistent packets sits one source that behaves just a little too consistently to be forged -- a real machine on the segment, not just noise. Pick it out from the flood and identify the true attacker's address.