in reply to Re: explore tcp/ip stack
in thread explore tcp/ip stack

if you have a tcp/ip connection, each protocol in each layer adds his data to the packet, that the opponent will receive. and this data also contains the data of the protocol in the underlying layer. for example: (http(tcp(ip4(ethernet)))) and this is called the tcp/ip-stack here

Replies are listed 'Best First'.
Re^3: explore tcp/ip stack
by Corion (Patriarch) on Jun 15, 2009 at 20:43 UTC

    I'm still unclear what you mean by "explore", but maybe Net::Pcap is what you're looking for.

    Also, the sequence of parentheses in your explanation seems weird, because I imagine the order exactly the other way around:

    ((((http)tcp)ip4)ethernet)

    ... because Ethernet frames enclose IP4 frames, which enclose TCP packets which enclose (fragments of) HTTP transactions.

    Update: Also see NetPacket for the actual (dis)assembly of packets.

      I'm still unclear what you mean by "explore",

      Deep packet inspection.

      He wants to see all the layers, not the just IP header.

      yes the order was wrong. and thx, net::pcap looks good