Wireshark · Wireshark-users: Re: [Wireshark-users] local IPs from pcap file

Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] local IPs from pcap file

From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>

Date: Mon, 31 May 2010 10:22:37 +0900

Dear Chris,


> Another possible way to deduce the IP address of the local machine is if you
> look for packets with a frame size less than then link layer minimum size, i.e.,
> for Ethernet, "frame.len < 60".

Thank you, that works very well indeed.

Greets,
Andrej

References:
- [Wireshark-users] local IPs from pcap file
  - From: Andrej van der Zee
- Re: [Wireshark-users] local IPs from pcap file
  - From: Chris Maynard

Prev by Date: Re: [Wireshark-users] TCP connection is still in ESTABLISH state actually it is disconnected
Next by Date: Re: [Wireshark-users] IP Error (Header Checksum) can effect Jitter calculation ?
Previous by thread: Re: [Wireshark-users] local IPs from pcap file
Next by thread: [Wireshark-users] Merging files duplicate acks & retransmissions
Index(es):
- Date
- Thread

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube