Wireshark · Wireshark-users: Re: [Wireshark-users] local IPs from pcap file

[Andrej van der Zee <andrejvanderzee@xxxxxxxxx>]

Dear Chris,


> Another possible way to deduce the IP address of the local machine is if you
> look for packets with a frame size less than then link layer minimum size, i.e.,
> for Ethernet, "frame.len < 60".

Thank you, that works very well indeed.

Greets,
Andrej