Ethereal-users: Re: [Ethereal-users] MAC to IP mapping

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Gisle Vanem" <giva@xxxxxxxxx>
Date: Thu, 3 Jul 2003 21:23:21 +0200
"ChuckS" <Penguin@xxxxxxxxxxxxxxxx> said:

> Where would I find how to use the source(appears to be MAC) to find
> the device IP address?
> 
>  # cat ethereal.out
> Frame 10 (110 bytes on wire, 110 bytes captured)
>     Arrival Time: Jul  3, 2003 11:52:18.789834000
>     Time delta from previous packet: 0.000477000 seconds
>     Time relative to first packet: 3.178913000 seconds
>     Frame Number: 10
>     Packet Length: 110 bytes
>     Capture Length: 110 bytes
> Ethernet II, Src: 00:04:00:6c:48:82, Dst: ff:ff:ff:ff:ff:ff
>     Destination: ff:ff:ff:ff:ff:ff (Broadcast)
>     Source: 00:04:00:6c:48:82 (LexmarkI_6c:48:82)
>     Type: Netware IPX/SPX (0x8137)

Huh! IPX packets are not IP. Your best effort would be
to filter for all traffic from 00:04:00:6c:48:82 and lok for
IP packets.

--gv