Hey there @neel!
There isn’t enough information in the SYN packet to know which application is listening on the port (or not listening in this case). Because no application layer traffic has occurred, the IDS engine hasn’t been able to identify which application is using the tcp session.
To test, I think you’ll need to reconfigure the SSH server to listen on port 2222.