Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: RE: [Ethereal-users] Hex address as source

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Dan Brown" <dbrown@xxxxxxxxxxxxxx>
Date: Wed, 19 Apr 2006 08:29:20 -0400
Outstanding, thank you all for the help with this, it was indeed an old
Epson print server broadcasting old Novell stuff.

Dan Brown
Network Administrator
Hoshino USA
1726 Winchester Rd
Bensalem PA 19020
215-638-8670 x171
 

> -----Original Message-----
> From: ethereal-users-bounces@xxxxxxxxxxxx 
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Hansang Bae
> Sent: Tuesday, April 18, 2006 11:33 PM
> To: Ethereal user support
> Subject: Re: [Ethereal-users] Hex address as source
> 
> On 03:49 PM 4/17/2006, Dan Brown wrote:
> >I recently started testing Ethereal and I have a question 
> about the source and destination addresses.  Much of the 
> traffic I am trying to identify is old IPX data from the 
> previous network.  Unfortunately the Source address is always 
> in what I assume is hex, it looks like this:
> > 
> >00000000.000048af8d6c
> > 
> >I was expecting an IP address so I'm not really sure how I 
> can use this information.  Could someone set me straight?  Thanks!
> 
> 
> Well, other's have already explained how an IPX address is 
> created (network+MAC).  Since your network address is all 
> zero's, it implies it's coming from a server (internal IPX 
> network  - for you old timers).
> 
> Since the MAC OUI is 000048, I'm assuming you have an Epson 
> printer that's acting as a print server.  And you forgot to 
> turn of IPX support on the NIC embedded into the printer.
> 
> hsb 
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 
>