RE: DDoS Attack

> .... The IP ID number is just a

  I believe it's somewhat less significant than THAT, even. IP ID numbers are used to correlate IP (fragment) frames that contain parts of the same higher-layer packet, and are totally irrelevant if no IP-level fragmentation has occurred. Nobody cares what their value is, as long as it's the same across all fragments that need to be reassembled into some packet, and different from any other fragments in the same direction of the same conversation.   (The correct way for a web server to deliver multiple objects to a client in parallel is over multiple client-end TCP *PORT* numbers.)

David Gillett