• Where to get tcpdump and libpcap:
  
  • http://www.tcpdump.org/
    
• Information on low level network stuff:
  
  • http://web.archive.org/web/20051201023927/http://www.whitefang.com/rin/ Raw IP Networking FAQ (last Internet Archive crawl before it went offline)