I am slightly confused...when encrypting a TCP or UDP packet, what actually gets encrypted, just the data or the data and header. It confuses me as if the whole packet gets encrypted including the destination IP and port numbe...how do systems, routers switches etc etc know where to route it?