Chapter 16 details Ethernet and provides guidance for processing digital evidence at the physical and data-link layers. Chapter 17 covers the basics of TCP/IP and describes how digital investigators can process and utilize log Chapter 18 discusses the Internet as a source of evidence and addresses key challenges, including anonymity.