What is Ping plotter looking for when it is using the tcp session packet option. An ACK or a RST (reset). If the destination is not listening on the selected tcp port and sends a RST is that treated any different than using tcp 80 to a real web site where the server will reply back with a ACK.

Also is each session set up with the final SynAck is it also ended with a Fin?