Wireshark-users: Re: [Wireshark-users] local IPs from pcap file

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Mon, 31 May 2010 10:22:37 +0900
Dear Chris,


> Another possible way to deduce the IP address of the local machine is if you
> look for packets with a frame size less than then link layer minimum size, i.e.,
> for Ethernet, "frame.len < 60".

Thank you, that works very well indeed.

Greets,
Andrej