Wireshark-users: Re: [Wireshark-users] IP Conversation

From: Jeffrey Walton <noloader@xxxxxxxxx>
Date: Thu, 10 Sep 2009 22:47:02 -0400

Hi rkruz,

MAC addresses are not included in the IP header. Is there anything
special about the placket, such as an optional header or IPSec? Some
fields in the optional header can change (if specified/present *and*
honored by the hardware) such as timestamps.

Jeff

On Thu, Sep 10, 2009 at 9:59 PM,  <rkruz@xxxxxxx> wrote:
> How do IP packets change as they pass between 2 routers.  If  I mirrored the output port of each router and captured the conversation packets with Wireshark, would both captures look the same with the exception of the MAC address and the TTL value?
>
> [SNIP]