I was reading scapy 3.0.0 documentation and saw this line of code.
>>> Ether()/IP()/IP()/UDP() <Ether type=0x800 |<IP frag=0 proto=IP |<IP frag=0 proto=UDP |<UDP |>>>>
This seems to mean that there are two IP packets nested in one E-frame. Can anyone explain this for me? I haven't seen any documents on this behaviour. I thought the standard of an ethernet frame is dest mac/ src mac/ type/ one ip packet?
No comments:
Post a Comment