track track track since the full blown tracker does soooo much more than the sloppy one, I expected sloppy to be faster full: 326 lines of code, sloppy: 69 but: you really don't want to use it on your firewall... but! for forwarded connections, it suffices to do the sequence number check on one side of the firewall, not both!