Wireshark-users: Re: [Wireshark-users] How to know which MAC address is the true client that conn
From: Chin Shi Hong <cshong87@xxxxxxxxx>
Date: Sun, 14 Nov 2010 08:38:08 +0800


On Sun, Nov 14, 2010 at 3:24 AM, Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx> wrote:
On Sat, Nov 13, 2010 at 10:24:05PM +0800, Chin Shi Hong wrote:

> are the real wireless client that connect to the wireless network
> AA:BB:CC:DD:EE:FF, or it may be only one of them are the real wireless
> client connect to the wireless network AA:BB:CC:DD:EE:FF. How can I
> know which one is the real wireless client connected to wireless
> network AA:BB:CC:DD:EE:FF?

I don't understand your question; why would any of the addresses not be
real ones?
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

My "real wireless client" mean the computer connected to the network using wireless, not through other method.

This is because I had done some testings. I tested with 2 computers. First computer connected to my wireless router by using wireless network adapter, while the second computer connected to my wireless router using wired connection. I had noticed that the MAC Address of the wired network adapter in second computer (the one using wired) are recorded as well, either as source address or destination address.

This make me very hard to program my application to detect which MAC address is the MAC address of the wireless network adapter, not the wired network adapter.