Wireshark · Wireshark-users: Re: [Wireshark-users] unique identifier for remote PC

[Stephen Fisher <stephentfisher@xxxxxxxxx>]

On Sat, Nov 24, 2007 at 10:59:08PM +0200, Bilal Alpertonga wrote:

> I want to ask a question, Why we can take MAC address of the router,
> not address of the PC,
> 
> Which protocol makes this MAC change ? 

Because the router accepts a packet and regenerates it going out another
interface, the MAC address has to change to be sourced from the router's
MAC address.  There isn't really a protocol that makes this the case.


Steve