iphdr->hlen includes the IP header, so truncate packet *before*

stripping the header.  Also fix an htons/ntohs confusion.

src/net/ipv4.c

 	dest.sin.sin_addr = iphdr->dest;
 
 	/* Strip header */
+	pkb_unput ( pkb, pkb_len ( pkb ) - ntohs ( iphdr->len ) );
 	pkb_pull ( pkb, sizeof ( *iphdr ) );
-	pkb_unput ( pkb, pkb_len ( pkb ) - htons ( iphdr->len ) );
 
 	/* Send it to the transport layer */
 	return tcpip_rx ( pkb, iphdr->protocol, &src.st, &dest.st );