From: mark_cruzNOTFORSPAM@hotmail.com   
      
   Hello,   
      
   I've encountered the following statement somewhere in the net: "Although   
   theoretically only 8 bytes of L4 info may be guaranteed in a fragment,   
   assume complete L4 info is available...". I don't understand how possible   
   that only 8 bytes of a transport are guaranteed in a fragment, as the IP   
   fragment can't be less than 46 bytes (minimum payload size for Ethernet   
   frame), and this includes 20 bytes of IP header and 20bytes of TCP header   
   (not considering variable-lngth options), UDP will be less.   
      
   Thus for the first IP fragment we always can expect IP header at tcp header,   
   while other fragments will carry only IP header + payload.   
      
   I believe I'm missing something, but I still can't understand why only 8   
   bytes can be guaranteed in a fragment? I would appreaciate if someone helps   
   to clarify this issue. Thanks !   
      
   Mark   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)