I've not read the details, but given that things aren't being matched against themselves-- Seems like you need to send ~ 2^16 requests and then ~ 2^16 spoofed

I've not read the details, but given that things aren't being matched against themselves-- Seems like you need to send ~ 2^16 requests and then ~ 2^16 spoofed replies.