diff --git a/server/handler/payload_access_audit.go b/server/handler/payload_access_audit.go
index c9e7423..df50c42 100644
--- a/server/handler/payload_access_audit.go
+++ b/server/handler/payload_access_audit.go
@@ -163,6 +163,9 @@ func logAudit(cSess *sessdata.ConnSession, pl *sessdata.Payload) {
 		case flags & 0x19:
 			// URG
 			return
+		case flags & 0xC2:
+			// SYN-ECE-CWR
+			return
 		}
 	}
 	s := utils.BytesToString(key)