Netfilter - Packet Defragmentation

Packet Defragmentation

See also: IP fragmentation

The nf_defrag_ipv4 module will defragment IPv4 packets before Connection Tracking (nf_conntrack_ipv4 module) sees them. This is necessary for the in-kernel Connection Tracking and NAT helper modules (which are a form of “mini-ALGs”) that only work reliably on entire packets, not necessarily fragments.

The IPv6 defragmenter is not a module in its own right, but is integrated into the nf_conntrack_ipv6 module.

Read more about this topic:  Netfilter

Famous quotes containing the word packet:

    “we know our end
    A packet of worm-seed, a garden of spent tissues.”
    —Allen Tate (1899–1979)