IP checksum offloading inbound: hw/driver set a flag "cksum good" or "cksum bad" verification routines look for these flags good: we're done bad: drop neither flag set -> verification in software