Whatever just went on with Casey driving, I think checks for icmp and IP as well as attpemts at packet editing.