TCP/IP option support Problem: Hosts may drop packets with unsupported (or irregular) TCP / IP options Attack: Determine target option support using fragtest, send chaff packets with options that the target will drop Solution: Actively remove options with a scrubber