"Juergen P. Meier" wrote:
>
> > When two TCP segments overlap, how do you know how the receiving host
> > will handle them? Will it keep the data in the first segment, or will
> > that data be overwritten by the second segment?
> > The answer is of course: you can't know.
>
> Simple: discard both packets. As IP fragment overlapping is in violation
> of the protocol specification, both fragments must be considered corrupt
> (since it would be nearly impossible to find out which packet is broken
> if not both are). See RFC-791 and 793.
No, no and no again! IP fragmentation is NOT the same as TCP segmentation!
Overlapping TCP segments can be sent in non-fragmented IP packets.
(Agh! I thought we'd been through this enough times on this list.)
--
Mikael Olsson, EnterNet Sweden AB, Box 393, S-891 28 �RNSK�LDSVIK
Phone: +46 (0)660 29 92 00 Direct: +46 (0)660 29 92 05
Mobile: +46 (0)70 66 77 636 Fax: +46 (0)660 122 50
WWW: http://www.enternet.se/ E-mail: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
