On Mon, Nov 11, 2002 at 02:39:29PM +1100, Jean-Francois Dive wrote: > > I'm not sure if UDP can be fragmented, but if so, I think this second > > ruleset would detect them anyway. > > virtually anything which runs on top of IP may be fragmented.. fragmentation > is done at the ip layer. Expl on UDP fragments: nfs Do you actually need to care about fragments though? I was under the impression that any sort of reasonable TCP/IP stack would not have any problems with packet fragmentation. -rob
Attachment:
pgp6IrI3SS2G5.pgp
Description: PGP signature