> My intent is to file a bug against IP (and I'm doing that now), as it's > probably not a good thing that it's letting these go up to the fanouts. > They're relatively harmless since they'll get dropped eventually, and > maybe that's why there are no explicit checks early in the data-path. I > don't know if this is deliberate (for performance maybe?), and that's > why I don't want to fix IP here and now to appease an unnecessary check > in ipnet. > > I chose not to drop these in ipnet simply because IP is in fact > receiving and processing them, and ipnet is meant to transparently offer > observability into the packets at the IP layer.
OK. -- meem
