TCP and UDP checksums refered to as "protocol checksums" cover only parts of the IP header "pseudo header checksum" cover the entire protocol header cover the entire payload potentially expensive to recalculate, not in cache for forwarded packets pf updating these cksums on the fly