OSI 7-Layer Interactive Security Sandbox

multi-client traffic · rate limiting · defence-in-depth lab

manual tx: client A

Ingress SYN / sec0

HTTP req / sec0

Allowed vs Dropped / sec0 / 0

alloweddropped

Server Health100%

cpu/mem nominal

Legitimate User · 10.0.1.50

Preset scenario

Browsing an e-commerce catalogue at human speed.

3 pkt/s

TCP flags

Packet Generator

Compose the payload, then encapsulate L7 → L1.

L7Application — HTTP

Method

Path

Body / payload

L4Transport — TCP/UDP

Proto

Src port

Dst port

L3Network — IP

Source IP

Dest IP

L2Data Link — Ethernet

Source MAC

Dest MAC

Frame type / EtherType

ENCEncapsulation Stack

GET /shop/cart · Accept: text/html; Cookie:…Data

TCP 44120 → 443Segment

IP 10.0.1.50 → 10.0.0.20Packet

ETH 00:1A:2B:3C:4D:5E → DE:AD:BE:EF:00:01 · type IPv4 (0x0800)Frame

payload⟨ IP packet 10.0.1.50 → 10.0.0.20 ⟩+ FCS

10110100 01001011 ⟶ on the wireBits

client A

client B

PERMITTEDBLOCKED / DROPPEDINSPECTEDclick any node for its inspection detail

Inspection Log

// press TRANSMIT or start an auto-stream to trace traffic hop by hop

Packet Inspector

eth.src00:1A:2B:3C:4D:5E

eth.dstDE:AD:BE:EF:00:01

eth.typeIPv4 (0x0800)

ip.src10.0.1.50

ip.dst10.0.0.20

protoTCP

port.src44120

port.dst443

tcp.flagsSYN ACK PSH

http.methodGET

http.uri/shop/cart

Accept: text/html; Cookie: session=ok