TCP applications

[paul000]

I have little question about TCP protocol
May firewall analyzer EIQ divide protocols and it is impossible to understand whay it make difference between TCP
and HTTP .
How does divide TCP protocol that I had possibility
to undderstand what users do with it .

Thank you

 

[xmb]

My guess would be, as http and many others run ontop of TCP, they get analyzed differently. Probably reassembling packets, or just by checking the port its sent through.

If it was just about top level protocols analyzing, you'd end up with a few protocols, TCP, UDP (arp belonging to that), etc, and nothing more... not much of nice analyzed output for that.

. Mac for productivity
.. Linux for developement
... Windows for solitaire