Firewalls And Segmentation From Packet Evidence