Matthew Dillon has changed the random IP sequence number generation in DragonFly to use the system generator.  This issue comes from a review of the old randomizer algorithm by Amit Klein, who has worked on some similar issues.  No idea how this affects other BSDs…