Hi,

Looking through the if_mpe.c code here.  Something struck me odd...

	"where is the length checks to make sure a packet is complete?"

    259         switch (dst->sa_family) {
    260         case AF_INET: {
    261                 struct ip *ip = mtod(m, struct ip *);
    262                 tos = ip->ip_tos;

If you can spend a minute time to look into this and confirm that it's missing
then I've done my service.

Thank you,
-pjp

-- 
** out of spiffy .signature messages