So i wonder where does such name resolution come from and if there is any other configuration file in Wireshark that defines it.Īs a bonus question :-). Nether in the ether file, the other place where resolution can be defined. However i could not find such entry in the file. When analyzing a Wireshark trace from my WiFi, which captured my IPhone connecting to the network, i noticed that the phone used a locally administered MAC address for some ARP messages but the resolved name from WireShark showed MS-NLB-PhysServer (nothing to do with Iphone i guess.).Īfter reading on the web i thought that this resolution comes from some default Wireshark lookup tables, like the manuf file. I recently found out about the concept of MAC Locally vs Universally administered MAC addresses.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |