If somebody could explain why I see the IPhone using two different MAC addresses (one is the universal/BIA and the other one is this locally administered MAC) it would be great. So i wonder where does such name resolution come from and if there is any other configuration file in Wireshark that defines it.Īs a bonus question :-). Nether in the ether file, the other place where resolution can be defined.
However i could not find such entry in the file. When analyzing a Wireshark trace from my WiFi, which captured my IPhone connecting to the network, i noticed that the phone used a locally administered MAC address for some ARP messages but the resolved name from WireShark showed MS-NLB-PhysServer (nothing to do with Iphone i guess.).Īfter reading on the web i thought that this resolution comes from some default Wireshark lookup tables, like the manuf file. If your Wi-Fi router has MAC address filtering enabled, you can temporarily disable. I recently found out about the concept of MAC Locally vs Universally administered MAC addresses. MAC address filtering is used as a security measure to prevent any unknown devices from joining the network.
0 kommentar(er)
