Wireshark-users: Re: [Wireshark-users] Finding MAC address
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: A Darren Dunham <ddunham@xxxxxxxx>
Date: Fri, 17 Apr 2009 16:23:14 +0000
On Fri, Apr 17, 2009 at 02:00:07PM +0000, Michael Egan wrote:
> I am monitoring packets that flow between our outer most router and
> our firewall.  When packets are flowing outbound the source IP address
> is the firewall.  I would like to know if there is a way to drill down
> to find the MAC address of the PC that sending out the packets?

No.  There's nothing to drill down to.  When the PC's router received
the packet, it discarded the ethernet frame.  That MAC address is not
sent further. 

-- 
Darren