Re: Killer Pings: sanity check

["Kevin M. Lahey" <kml @ nas . nasa . gov>]

In Firewalls-Digest V5 #622, Peter Maersk-Moller writes:
>No simple device (like a gateway) can remove the problem by doing sanity
>check. To do that it would have to keep track of all packets in all
>connections. This is not feasable without using a lot of both RAM
>and processing power. Worst of all, it will introduce unacceptable latency.

Why not just look at the fragment offset + length?  If the sum is
less than 65535, the fragment is okay.  Or am I missing something?

Good luck,

Kevin