agDosPortStatsXmasScanAttack 1.3.6.1.4.1.1872.2.5.1.2.6.1.1.35

TCP packets were the TCP sequence number is zero and FIN, URG and PSH bits are set.