[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

TCP small fragments



Hi folks,

 

IP packets containing TCP payload can be fragmented. Firewalls have checks on TCP flags to check if there are illegal combinations of TCP flags. However if the TCP header in the IP packet itself is fragmented, it may not be easy to track such a packet.

 

What is the default behavior for such packets in which the TCP header itself is not completely there (I know a lot of hosts crash on getting such packets)? How do ISP deal with such scenarios?

 

Thanks,

Vishwas