> table lookups of hop count -> forged address >> There is no need to do "table lookups of hop count" >> If you see a TTL=1 you send back the forged response

> table lookups of hop count -> forged address >> There is no need to do "table lookups of hop count" >> If you see a TTL=1 you send back the forged response as coming from $IP_1, if you see a TTL=2 you forge the response as coming from $IP_2 You're describing a table lookup of the forged address using the hop count.