Security Normalization (scrub) Sanitizes packet content to remove ambiguity: IP fragment reassembly IP normalisation IPID randomisation TCP normalisation Illegal flag combinations TCP options PAWS (Protect Against Wrapped Sequence Numbers) Enforce minimum TTL