The tables below shows flags from $3$ successive packets captured from a network scanner $($such as Wireshark$).$ The client column indicates packets from the client. The server column indicates packets from the server. Each entry in those columns shows TCP flags asserted for those transactions.

Which table best represents a sequence of transactions from a TCP Half Open scan for an open port?

Table $1$

Index Client Server

$1SYN$

$2,$

$3$ ACK

Table $2$

Index Client Server

$1SYN$

$2SYN+$ACK

$3RST$

Table $1$

Table $2$