I want to develop extension(intrusion detection) for tor. for that i have to extract TCP and IP header from packet.

I need to know where and how tor handle packet(TCP/IP).

is it in buffer.c / connection.c ?

Regards

Kawsar