Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,
Check out this article for the FTD TCP connection flags:
https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/218092-interpret-firepower-threat-defense-tcp-c.html