I had a quick look at the source code (tcp_input.c) and it looks like
that "Stealth Mode connection attempt to TCP" is reported when the SYN
flag is on but no TCB exits.
Does this mean that if you receive a ACK|SYN answer from a remove
server to a SYN packet but, by some kind of unknown magic, the TCB is
NULL, this is considered a Stealth mode connection?
BTW, there is probably a typo at the end of line 1160
"* a wakeup to the process connected to our socket). We can reasonable"