about packet's load

void FragReassembler::AddFragment(const struct ip* ip, const u_char* pkt,
        uint32 frag_field)
  {
          ......

You shouldn't modify the event engine when there's already an event that
generates what you need.

Perhaps we should move this discussion over to private email.

    Vern