Filter Mechanisms

• Ethernet packets contain ethernet header information, plus IP data
• IP packets contain IP header information, plus TCP/UDP data
• So on, upto particular protocol data
• The filter can examine the IP header and the TCP/UDP header