[Courses] [Security] netstat status field

[Hamster]

Raven,

Hi! Thanks for the answer about my raw mode question.

I'm still a bit confuzzed by something though. If raw mode packets are not passing through the normal tcp/ip encapsulation bizzo, then how/what/who is encapsulating the packet with the headers that include (amongst all the other info) destination address, and the checksum footers?

I am reasonably familiar with the normal 7 layer osi model, and am curious how something bypasses this (esp the network layer).

Am I making sense??

:)

Hamster