Embarrassment -- was checking byte 6 with 0x1fff to check for fragments. Should have been checking *short* at byte 6! (This caused us to say, eg, that all packets with DF are fragments!)
Embarrassment -- was checking byte 6 with 0x1fff to check for fragments.
Should have been checking *short* at byte 6!
(This caused us to say, eg, that all packets with DF are fragments!)

greg-minshall/flstats,greg-minshall/flstats