Overlap resolution


Problem: Some hosts favor older / newer data in resolving overlapping IP fragments or TCP segments

Attack: Determine target overlap behaviour using fragtest, send overlapping fragments or segments past IDS

Solution: Resolve both ways before content inspection, or scrub to canonicalize