Ethereal-users: Re: [Ethereal-users] MAC to IP mapping

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Thu, 3 Jul 2003 14:32:20 -0500 (CDT)
On Thu, 3 Jul 2003, ChuckS wrote:

> Where would I find how to use the source(appears to be MAC) to find
> the device IP address?

You might try looking at the ARP table of a device likely to have an entry
for that address, e.g. the default router on that subnet.


>  # cat ethereal.out
> Frame 10 (110 bytes on wire, 110 bytes captured)
>     Arrival Time: Jul  3, 2003 11:52:18.789834000
>     Time delta from previous packet: 0.000477000 seconds
>     Time relative to first packet: 3.178913000 seconds
>     Frame Number: 10
>     Packet Length: 110 bytes
>     Capture Length: 110 bytes
> Ethernet II, Src: 00:04:00:6c:48:82, Dst: ff:ff:ff:ff:ff:ff
>     Destination: ff:ff:ff:ff:ff:ff (Broadcast)
>     Source: 00:04:00:6c:48:82 (LexmarkI_6c:48:82)
>     Type: Netware IPX/SPX (0x8137)
> Internetwork Packet eXchange
>     Checksum: 0xffff
>     Length: 96 bytes
>     Transport Control: 0 hops
>     Packet Type: PEP (0x04)
>     Destination Network: 0x00000000 (0)
>     Destination Node: ff:ff:ff:ff:ff:ff (Broadcast)
>     Destination Socket: SAP (0x0452)
>     Source Network: 0x00000000 (0)
>     Source Node: 00:04:00:6c:48:82 (LexmarkI_6c:48:82)
>     Source Socket: Unknown (0x83c2)
> Service Advertisement Protocol
>     General Response
>     Server Name: !LEX002000361241
>         Server Type: Unknown (0x055E)
>         Network: 00 00 00 00
>         Node: 00:04:00:6c:48:82
>         Socket: Unknown (0x83c2)
>         Intermediate Networks: 1
> 
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>