I found this image from here:

Questions:
-
Does the TCP/IP stack means the 4 layers (excluding the HW layer) on right?
-
As I understand the diffrence between libpcap and divert socket- they are both raw sockets, but with libpcap you can just sniffing while with divert Sockets you can detour and dump them, am I right?
1 Answer