The really good reminder about ASA TCP Connection flags
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113602-ptn-113602.html
I just keep URL here, because I forgot this today, and this is really good explanation.