Bad options?

[Daniel.Ramaswami () celera com]

Hello,

Has anyone had any detects similar to below? Is this a form of fingerprint
(this being a fingerprint response? Any insight into what the last TCP 
option 
fields may be? I have seen interesting traffic like this before, but have 
not found any text that could explain it.

Any help appreciated.

09:27:21.621476 xxx.xxx.xxx.xxx.http > xxx.xxx.xxx.xxx.46045: . ack 
3207692596 win 8688 <nop,nop,sackOK,[bad opt]> (DF)
                         4500 0034 e1a2 4000 3e06 b453 xxxx xxxx
                         xxxx xxxx 0050 b3dd d43c c6f2 bf31 8134
                         8010 21f0 980d 0000 0101 0402 4c66 7844
                         0278 c313

Thanks,
Dan