IP fragmentation can be manipulated for attacks. One case is to use it to launch a DoS like attack, and another case is to use it to launch an attack that can evade the intrusion detection system.

Recent Linux distributions (and even Wireshark) have implemented mechanisms to defeat the IP fragmentation attack. Please describe the detection and defending scheme against the two types of attacks mentioned in (2).