If somebody could explain why I see the IPhone using two different MAC addresses (one is the universal/BIA and the other one is this locally administered MAC) it would be great. So i wonder where does such name resolution come from and if there is any other configuration file in Wireshark that defines it.Īs a bonus question :-). Nether in the ether file, the other place where resolution can be defined. However i could not find such entry in the file. IP-based Geolocation is mapping of an IP address or MAC address to the. When analyzing a Wireshark trace from my WiFi, which captured my IPhone connecting to the network, i noticed that the phone used a locally administered MAC address for some ARP messages but the resolved name from WireShark showed MS-NLB-PhysServer (nothing to do with Iphone i guess.).Īfter reading on the web i thought that this resolution comes from some default Wireshark lookup tables, like the manuf file. Although we try to be precise with the lookup location and other details. I recently found out about the concept of MAC Locally vs Universally administered MAC addresses.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |