Re: [RFC/PATCH] "strict" ipv4 reassembly

[Thomas Graf <tgraf@xxxxxxx>]

* Herbert Xu <E1DYAHF-0006qW-00@xxxxxxxxxxxxxxxxxxxxxxxx> 2005-05-18 08:11
> Instead of measuring the distance using time, let's measure it
> in terms of packet counts.  So every time we receive a fragmented
> packet, we find all waiting fragments with the same src/dst pair.
> If the id is identical we perform reassembly, if it isn't we increase
> a counter in that fragment.  If the counter exceeds a threshold,
> we drop the fragment.

I like this, although the problem is derived to the definition
of the threshold. Any ideas on how to define this? A
combination of your idea together with the idea I stated in
another post which would additional expire fragments earlier
depending on the actual packet (or fragment) rate might give
better results.