Wireshark · Wireshark-users: Re: [Wireshark-users] unique identifier for remote PC

["Bilal Alpertonga" <bilal.alpertonga@xxxxxxxxxxxx>]

Hello,

I want to ask a question,
Why we can take MAC address of the router, not address of the PC,

Which protocol makes this MAC change ? 

Regards,
ega  

-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Ulf Lamping
Sent: Saturday, November 24, 2007 7:32 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] unique identifier for remote PC

d a schrieb:
> If I use wireshark to capture a tcp exchange between my PC and another 
> PC (a file transfer for example)  is there any information unique to 
> the remote PC that would identify it later upon first hand visual 
> inspection?
>
> I originally thought that the MAC address in Wireshark would achieve 
> this however it looks like instead Im getting the MAC address of the 
> ISP's router rather than the remote PCs NIC.
>
If your remote PC is behind a router, take a look the PC's IP address. 
The router will exchange the MAC addresses.

Regards, ULFL
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users