captured ethernet frames

From: Tom Brown (brown_at_esteem.com)
Date: 10/29/04


Date: 28 Oct 2004 17:46:12 -0700

I send out my own ethernet broadcast frame then capture it on two
different devices. One device is a pc; the other device is a wireless
access point. The source address is a little different in the capture
on the pc than on the wireless access point. I was wondering why. Here
is what I send out:

dest addr source addr type data
030000000007 000475c27401 3842 0000000001008104...

This is what I capture on the wireless access point:

dest addr source addr type data
030000000007 000475c27401 3842 0000000001008104...

It looks as I expect it to. Just like I sent it. However, on the pc
the capture looks like this:

dest addr source addr type data
030000000007 000475ffffffc27401 3842 000000000100ffffff8104...

Why are the extra ff's showing up in the source address and in the
data on the pc?

Thanks,
Tom



Relevant Pages

  • Re: captured ethernet frames
    ... The source address is a little different in the capture ... >dest addr source addr type data ... packet dumping routine using a "signed char" type rather than an "unsigned ...
    (comp.os.linux.networking)
  • Wireless Pentest Question
    ... interesting packets in a packet capture. ... The problem relates to creating traffic on a wireless network in case ... the WEP key being used ...
    (Pen-Test)
  • Re: Packet Capturing and Injecting- Wireless
    ... Packet Capturing and Injecting- Wireless ... I have two wireless cards; one of them is Orinoco Gold; the other is SMC2532W-B ... Can I packet inject and capture at the same time with one of them; if it is possible which one is useful for this? ... solution FREE - limited Time Offer ...
    (Pen-Test)
  • Re: Wireless Pentest Question
    ... > The problem relates to creating traffic on a wireless network in case ... > you dont find a lot of traffic for a good capture. ... > you can create traffic on a WEP network without knowing ... > Best regards ...
    (Pen-Test)
  • Re: OSD Capture Image Wizard Fails
    ... We tested capturing from a wireless a while back, ... accomplish the capture - I should have this answer for you tomorrow. ... Created a small network to isolate the systems from the corporate ... > The machine has a Broadcom ethernet card with a Dell Mobility Wireless. ...
    (microsoft.public.sms.tools)