Ethereal-dev: Re: [Ethereal-dev] HW address resolving mechanism

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 20 Jan 2005 18:05:47 +0100 (CET)
Thanx Guy,
I'll look into ARP.

James: I think I've got my answer, no need to dig deeper into my previous
reply. Thanx for the help. :)

On Thu, 20 Jan 2005, Guy Harris wrote:

> Jaap Keuter wrote:
>
> > I've run into trouble with the Hardware to IP address resolution mechanism
> > in Ethereal (check the column Hardware address resolved). It gets confused
> > if multiple LAN's (VLAN's) are present on the same wire. An interface
> > seems to get related to the first IP address seen on a packet from that
> > interface. Can anyone point me to where this resolution mechanism is, and
> > where it gets its knowledge from?
>
> ARP packets.  If Ethereal sees an ARP packet that indicates the MAC
> address corresponding to a given IP address, it'll say the name
> corresponding to that IP address also corresponds to the host name.
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>