Digital Forensics for Network, Internet, and Cloud Computing

Chapter 4. Deciphering a TCP Header

Information in This Chapter

■OSI and TCP Reference Models

■TCP Header

■Decipherment of a TCP Segment

■TCP Signature Analysis

The Transmission Control Protocol (TCP) is a key protocol in the successful implementation of network computing. This chapter provides an overview of the TCP structure for the network forensics examiner.

This TCP/Internet Protocol (IP) model functions as the industry framework for end-to-end communications between a source and destination device. This section is comprised of four major topics. This first topic explains the relationship between the TCP/IP model and abstract Open Systems Interconnection (OSI) reference model. It provides a description of the TCP/IP model layer and the encapsulation ...