NetFlow Lab/Protocol Labs/IP
Simulated
Mission

Route one IP datagram from PC-1 192.168.1.10 to 203.0.113.20. It carries a TCP segment for port 443 — watch what each layer changes.

topology · 192.168.1.0/24 → internet live
LAN 192.168.1.0/24 mask 255.255.255.0PUBLIC INTERNET — routed, no NAT beyond hereGi0/0Gi0/1PC-1192.168.1.10PC-2192.168.1.20PC-3192.168.1.23PC-4192.168.1.25LAN SWITCHlayer 2ROUTER / GATEWAYNAT + PATGi0/0 192.168.1.1Gi0/1 80.12.16.10○ NAT idleISPinternetWEB SERVER203.0.113.20HTTPS TCP 443○ listening
ip_header · live valuesnot sent
source IP · TCP port
192.168.1.10:52310

PC-1’s private IP plus the encapsulated TCP source port.

destination IP · TCP port
203.0.113.20:443

The IP destination drives routing; port 443 belongs to the TCP segment carried inside.

ttl
64

Decremented once per router hop.

protocol
6 (TCP)

Tells the receiver which layer-4 handler to use.

nat translation
—

Not yet translated.

forwarding_walk
Destination
IDLE
Route lookup — local or remote?
Handed to default gateway
Switch forwards on MAC (L2)
Router rewrites source (NAT/PAT)
TTL decremented across the internet
Final hop to 203.0.113.20
Delivered to the HTTPS listener
Reply un-NATted back to PC-1
Think first · step 1 of 8

PC-1 wants to reach 203.0.113.20. What does it have to decide before sending anything?

what just happened

An IP datagram carries source and destination IP addresses plus a protocol number. Its payload here is a TCP segment with ports. Routers normally preserve the IP addresses, while NAT deliberately rewrites the source mapping. Press send to follow one.

ttl=64 (typical Linux/macOS default) · Windows uses 128