> > > When two TCP segments overlap, how do you know how the receiving host
> > > will handle them? Will it keep the data in the first segment, or will
> > > that data be overwritten by the second segment?
> > > The answer is of course: you can't know.
> >
> > Simple: discard both packets. As IP fragment overlapping is in violation
> > of the protocol specification, both fragments must be considered corrupt
> > (since it would be nearly impossible to find out which packet is broken
> > if not both are). See RFC-791 and 793.
>
> No, no and no again! IP fragmentation is NOT the same as TCP segmentation!
> Overlapping TCP segments can be sent in non-fragmented IP packets.
damn, you'r right! - i shouldnt reply before i got my second cup of coffee ;)
> (Agh! I thought we'd been through this enough times on this list.)
i shut my mouth now :]
Juergen
--
Juergen P. Meier email: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
