• Parallax@kbin.social
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    1 year ago

    What do you mean interception is at a different layer? You can capture at any layer as long as the payload isn’t encrypted, and if it is, you still get layers 1 through 4 (Physical, Link, Network, and Transport).

    • andrew@lemmy.stuart.fun
      link
      fedilink
      arrow-up
      6
      ·
      1 year ago

      UDP is a transport protocol. OSI layer 4. It sits atop the packet (network/L3) layer which is where IP dictates where a packet is going. A broadcast or multicast IP address would mean it can be observed by many machines, but unicast is still the most common, and is routed to just one machine.