Hybrid Single-Packet IP Traceback with Low Storage and High Accuracy

Table 1

IP header; Identification field is used for our packet marking.

Bit offset	0–3	4–7	8–15	16–18	19–31
0	Version	Header length	TOS	Total length
32	Identification field			Flag	Fragment offset
64	TTL		Protocol	Header checksum
96	Source address
128	Destination address
160	Options
160 or 196+	Payload (first 8 bytes)