Option with their initial SYN packets, along with digital signatures signed by the original connection keys verifying that the new subflow is indeed part of this MPTCP connection. Keeping track of when packets time out is usually handled by putting a record for each packet sent into a timer list....