Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2152] IEEE locally assigned addresses reported as belongin

Date: Sat, 5 Jan 2008 11:08:59 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2152





------- Comment #3 from markzzzsmith@xxxxxxxxxxxx  2008-01-05 11:08 GMT -------
Replying to a couple of posts,

"You shouldn't confuse Wireshark as being authoritative in these matters. It
tries to show the most common interpretation for the data it sees, but there's
always some guesswork involved. Same here. The MAC addresses you mention are
being mentioned in documentation regarding MS NLB. That is where this guesswork
is based upon."

Then maybe adding a flag or indicator in Wireshark next to the OUI decode
showing that this is a common use, but not an authorative assignment would
avoid confusing people who don't know as much about locally assigned addresses
as you and I do.

"- Use a different (locally assigned) MAC address for your machine that doesn't
overlap with one snarfed by some vendor that doesn't really care about
standards."

That's exactly why I'd prefer it not to be done. People will say that because
Wireshark shows it as belonging to Microsoft, and the Wireshark people are
network protocol experts, then it must be ok for Microsoft to do this.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.