How does -f fragmentation affect detection, and what risks does it carry?

How does -f fragmentation affect detection, and what risks does it carry?

• A. It fragments packets to evade filters; It can increase detection reliability.
• B. It fragments packets to evade filters; It can reduce reliability.
• C. It fragments packets to evade filters; It has no impact on reliability.
• D. It fragments packets to evade filters; It can reduce reliability and may be blocked by some IDS.

Answer: (D)

Fragmentation is used to bypass filters by breaking probes into IP fragments so some filters that only inspect the first fragment won’t see the full payload. The trade-off is reliability: fragmented packets rely on proper reassembly along the path, and many networks or devices drop or mishandle fragments, which can cause probes to fail to elicit responses or produce incomplete results. In addition, many intrusion detection systems are configured to recognize fragmented traffic and may block or slow down such scans. So while fragmentation can help evade filtering, it tends to reduce detection reliability and carries the risk of being blocked by some IDS.

Fragmentation is used to bypass filters by breaking probes into IP fragments so some filters that only inspect the first fragment won’t see the full payload. The trade-off is reliability: fragmented packets rely on proper reassembly along the path, and many networks or devices drop or mishandle fragments, which can cause probes to fail to elicit responses or produce incomplete results. In addition, many intrusion detection systems are configured to recognize fragmented traffic and may block or slow down such scans. So while fragmentation can help evade filtering, it tends to reduce detection reliability and carries the risk of being blocked by some IDS.