as it turns out, limiting the number of packets in the resequence queue does catch a few ill behaved connections that are not sending tinygrams. in this case, smtp:
Thu Aug 5 20:40:59: resequence queue > packets: 61 60; 81058 bytes Thu Aug 5 20:40:59: reseq x.x.x.x.54772 -> 12.51.113.7.25 Sun Aug 8 16:57:54: resequence queue > packets: 46 45; 34000 bytes Sun Aug 8 16:57:54: reseq y.y.y.y.1202 -> 12.51.113.7.25 (window scaling accounts for the different packet limits.) - erik
