Just out of curiosity, how does a "wireguard packet' look like on the wire ??

I'm guessing:

 

 Ethernet

 IP

 UDP

|------------------|

| IP                 |

| WG payload |

|------------------|

What's in the box is encrypted

Is that right ?? If not, what does it look like?

Thanks,

James