This Counter32 measures packets discarded by the fragmentation filter, which may block all fragments or fragments meeting suspicious patterns depending on configuration. Operators monitor this to tune DDoS policies and ensure legitimate fragmented traffic is not over-blocked. For example, 500 drops per minute during normal operation might warrant loosening fragment filters to prevent customer complaints.