Ethereal-users: Re: [Ethereal-users] Sniffing MAC Addresses

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "James Fields" <jvfields@xxxxxxx>
Date: Sat, 21 Dec 2002 09:15:41 -0500
Title: Message
You are likely simply not noticing them.  In the 'one line per packet' display in Ethereal's top pane, the source and destination address shown may or may not be what you are looking for.  THere are two things you can do:
1.  Highlight a packet and look in the middle pane at the protocol breakdown at layer II (usually ethernet for many people these days) and see if you can't spot the MAC addresses there. 
2.  If you need to see them in the summary display up top, you can change what columns are displayed, in what format, and in which order, using the Edit menu, choosing Preferences.
----- Original Message -----
Sent: Friday, December 20, 2002 12:46 AM
Subject: [Ethereal-users] Sniffing MAC Addresses

Can someone give me some tips on how to sniff MAC addresses.  It seems like once I get to where I can sniff IP addresses, ports, and such, the MAC address has already been pulled apart at a lower level.  My question is more for programming a sniffer generally, but not specific to Ethereal. 
 
How, generally is it possible to sniff MAC addresses?
 
Any input or ideas would be greatly appreciated.  Thanks.