record syn packet drop