in reply to explore tcp/ip stack

What do you mean by stack?

Replies are listed 'Best First'.
Re^2: explore tcp/ip stack
by sveni (Initiate) on Jun 15, 2009 at 20:28 UTC
    if you have a tcp/ip connection, each protocol in each layer adds his data to the packet, that the opponent will receive. and this data also contains the data of the protocol in the underlying layer. for example: (http(tcp(ip4(ethernet)))) and this is called the tcp/ip-stack here

      I'm still unclear what you mean by "explore", but maybe Net::Pcap is what you're looking for.

      Also, the sequence of parentheses in your explanation seems weird, because I imagine the order exactly the other way around:

      ((((http)tcp)ip4)ethernet)

      ... because Ethernet frames enclose IP4 frames, which enclose TCP packets which enclose (fragments of) HTTP transactions.

      Update: Also see NetPacket for the actual (dis)assembly of packets.

        I'm still unclear what you mean by "explore",

        Deep packet inspection.

        He wants to see all the layers, not the just IP header.

        yes the order was wrong. and thx, net::pcap looks good