Ethereal-dev: [Ethereal-dev] MAC Sniffing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Gregory Gordon" <ggordon@xxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 20 Jan 2003 14:59:21 -0700
Title: Message
Hello,
 
I've been developing a Windows 2000/XP sniffer for several months now.  I've never figured out how to sniff the MAC address though.  It seems that by the time the data gets to me, the MAC address and the network header have already been removed from the packet by the OS. 
 
Does anyone have any idea how to determine the packet's MAC address on Windows.  Does Windows list it in a file somewhere?  Does Ethereal sniff it some other way? 
 
Any information you can offer will be helpful. 
 
Thanks,
Gregory