Timing


Problem: Host IP fragment reassembly timeouts vary

Attack: Delay first, last, or random packet in the queue after using fragtest to determine fragmentation reassembly timeout
e.g. the "Sneakers" evasion attack

Solution: Actively reassemble IP fragments