Thanks for the reply.

I assumed the mempool was gossiped by nodes on an ongoing basis; I assume I was incorrect and it is only transactions that are recently broadcast that are gossiped between nodes.

I take it then that a node cannot 'request' transactions in the mempool over the network to cross check against? I guess this could be used to drain resources/ddos.