Re: local IPs from pcap file

[Andrej van der Zee <andrejvanderzee () gmail com>]

Dear Chris,


> Another possible way to deduce the IP address of the local machine is if you
> look for packets with a frame size less than then link layer minimum size, i.e.,
> for Ethernet, "frame.len < 60".

Thank you, that works very well indeed.

Greets,
Andrej
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe