Hi folks, IP packets containing TCP payload can be fragmented. Firewalls
have checks on TCP flags to check if there are illegal combinations of TCP
flags. However if the TCP header in the IP packet itself is fragmented, it may
not be easy to track such a packet. What is the default behavior for such packets in which the
TCP header itself is not completely there (I know a lot of hosts crash on
getting such packets)? How do ISP deal with such scenarios? Thanks, Vishwas |