 Now attacker tries to probe zombie for result.Attacker to Zombie ->SYN/ACK, Zombie to Attacker -> RST (IPID increment by 1)
So, in this process IPID increments by 2 finally.When an idle scan is attempted, tools (for example nmap) tests the proposed zombie and reports any problems with it.