Wireshark mailing list archives
Re: local IPs from pcap file
From: Andrej van der Zee <andrejvanderzee () gmail com>
Date: Mon, 31 May 2010 10:22:37 +0900
Dear Chris,
Another possible way to deduce the IP address of the local machine is if you look for packets with a frame size less than then link layer minimum size, i.e., for Ethernet, "frame.len < 60".
Thank you, that works very well indeed. Greets, Andrej ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- local IPs from pcap file Andrej van der Zee (May 25)
- Re: local IPs from pcap file Sake Blok (May 26)
- Re: local IPs from pcap file Andrej van der Zee (May 26)
- Re: local IPs from pcap file Sake Blok (May 26)
- Re: local IPs from pcap file Andrej van der Zee (May 26)
- Re: local IPs from pcap file Chris Maynard (May 28)
- Re: local IPs from pcap file Andrej van der Zee (May 30)
- Re: local IPs from pcap file Sake Blok (May 26)