fixed an off-by-one error in ip checksum end - goes to prove that this stuff needs more testing...