About IPv6 Packet Header Verification Performed by the Flow Module for SRX Series Devices
This topic gives an overview of some of the IP version 6 (IPv6) packet header verification that the flow module for SRX Series devices performs.
To ensure the integrity of an IPv6 packet, the flow module performs the following sanity checks.
For all IPv6 packets, it checks the following parts of the header:
Hop-by-hop extension to ensure that it follows the basic IPv6 header and does not come after another extension header
That the IP data length error (IP length—total extension header length is not less than zero (<0)
In addition to these verifications, the software performs other standard checks such as verifying that the correct IP version is specified and that the length of the IP address is correct.