ID Field Encoding Each IP packet has an ID to allow packet defragmentation. Two bytes long Normally increments each time. Encode our data in the ID field Cannot correctly identify order - must send packets slowly Can't be part of a legit connection Sender must create raw IP packets Receiver must sniff IP packets One to two bytes per packet Works best on simple packet filters.