NTP uses UDP pakets - UDP is sent with IP-header and IP-header is sent with
MAC-header.
See: http://www.networksorcery.com/enp/protocol/ntp.htm
So I think there should also be the MAC address available.
-Hannu
----- Original Message -----
From: <cazakelj@xxxxxxxxxxxxxxxxxxxx>
To: <hannus@xxxxxxxx>
Sent: Saturday, May 17, 2003 7:06 PM
Subject: RE: [Ethereal-users] MAC and IP
I might be mistaken (It's been ages since I had my TCP classes in college),
but I *think* the MAC address is part of the header attached to every TCP
packet (Along with things like source IP, destination IP, sequence number,
etc).
> -----Original Message-----
> From: ethereal-users-bounces@xxxxxxxxxxxx
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx]On Behalf Of Hannu Sehm
> Sent: Saturday, May 17, 2003 11:03 AM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] MAC and IP
>
>
> I would like to identify computers contacting my NTP-server.
> I can see the IP addresses with:
> tethereal n -R udp.port==123
>
> but I need also identify MAC address. Is that possible and how?
>
> Thanks,
>
> -Hannu
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>