If the port is open and listening, the handshake contains a RST message that resets the TCP connection and removes the connection attempt from the destination server's logs. Most contemporary intrusion detection systems are capable of detecting SYN port scanning, also known as half-open TCP scanning.