This is indeed a combination of a windows 95 bug - apparently fixed in later
releases and a Linux bug when we construct a packet over 64K long (not valid)
Unfortunately the ip_send test program I had didnt build a packet that got
high enough up the stack after reassembly to cause an explosion.
Fun bug ;). Now perhaps you can get the tcp fixes into the 2.0.24 release
and the route cache leak fix hey Linus 8)