Charles B. Kaplan wrote:
>
> >The only time you're ever likely to see a packet with FO=1 is if a bad guy is
> >knocking at your door.
>
> Would there ever be exceptions to this that would stem from the passing of
> data long distance, and thus forcing the data into a bigger pipe (say an ATM
> link cross country), and then back out of the pipe, possible becoming
> fragmented.
See rfc1858, "Security Considerations for IP Fragment Filtering".
--
Eric V. Smith | Some for renown on scraps of learning dote,
EricSmith @
windsor .
com | And think they grow immortal as they quote.
Windsor Software Corp +----------------------------------+ Edward Young
http://www.windsor.com/ Windows NT, Unix, SQL Server | English poet
|
|