IPid related facts (Score 0)

the article mention that some operating system just increase the counter for each connection. my concern is if we use a webserver or any running workstation as a zombie, the server might get/initiate other connection other than to/from the attacker. this will eventually increase the counter.. therefore the result of the probe will become false since the counter will alway gets increased