I think we should also take pseudo packets into consideration. They are created during things like defrag or tunnel handling operations. So we can't get rid of allocated Packets (1).