Figure 1-1 shows where the SunScreen software resides in relation to the network protocol stack. Packets can flow from the network to an application; they can flow through the screen (between segments); or flow out to the network from an application running on the screen. For a detailed description of how SunScreen does Packet Filtering, see the SunScreen 3.2 Administrators Overview