Wireshark · Ethereal-users: Re: [Ethereal-users] Hex address as source

[Hansang Bae <hbae@xxxxxxxxxx>]

On 03:49 PM 4/17/2006, Dan Brown wrote:
>I recently started testing Ethereal and I have a question about the source and destination addresses.  Much of the traffic I am trying to identify is old IPX data from the previous network.  Unfortunately the Source address is always in what I assume is hex, it looks like this:
> 
>00000000.000048af8d6c
> 
>I was expecting an IP address so I'm not really sure how I can use this information.  Could someone set me straight?  Thanks!


Well, other's have already explained how an IPX address is created (network+MAC).  Since your network address is all zero's, it implies it's coming from a server (internal IPX network  - for you old timers).

Since the MAC OUI is 000048, I'm assuming you have an Epson printer that's acting as a print server.  And you forgot to turn of IPX support on the NIC embedded into the printer.

hsb