At Wed, 03 Jul 1996 10:48:32 CDT, VaX#n8 writes:
>> In message <199607031547.LAA28220@jekyll.piermont.com>, "Perry E. Metzger" writ
>> es:
>> >(Don't forget that a socket is a 4-tuple 
>> >[port-1, host-addr-1, port-2, host-addr-2]
>> >and not a one sided thing.)
>> 
>> Ah yes, I forgot about the source port as a possible source of information.
>> Don't know where I got the other idea.  Thanks.

Just to be pedantic, it's a 6-tuple made up of <port, addr, protocol>
for both the source and the destination (OK, so protocol is always the
same for both).  Otherwise it would be impossible for the kernel to
distinguish between (eg) TCP and UDP exchanges using the same port
numbers. 

Pete.