Sunday, April 28, 2019

Two IP packets inside one Ethernet frame ?

I was reading scapy 3.0.0 documentation and saw this line of code.

>>> Ether()/IP()/IP()/UDP() <Ether type=0x800 |<IP frag=0 proto=IP |<IP frag=0 proto=UDP |<UDP |>>>> 

This seems to mean that there are two IP packets nested in one E-frame. Can anyone explain this for me? I haven't seen any documents on this behaviour. I thought the standard of an ethernet frame is dest mac/ src mac/ type/ one ip packet?



No comments:

Post a Comment