Basic Work With libpcap - Protocol Parsing

• In order to do something useful, we need to know how the protocols are layered, byte for byte.
• For example, on interface 'ppp0':

       --------------------------------------------------------------
       | PPP header |       PPP Payload                             |
       --------------------------------------------------------------
                          /                                    \
                    -------------------------------------------------
                    | IP header |   IP Payload                      |
                    -------------------------------------------------
                                     /                       \
  
                                -------------------------------------
                                | TCP header |   TCP Payload        |
                                -------------------------------------
  

Originally written by guy keren