use protocol checksum offloading better proto_cksum_out called late when we know the outgoing interface can remove almost all other checksum handling from the stack need checksumming? set flag, be done don't need to care about offloading or not can remove almost all checksum handling from pf just set flags