Re: [Ethereal-users] Sniffing MAC Addresses

[James Fields]

Title: Message

You are likely simply not noticing them.  In the 'one line per packet' display in Ethereal's top pane, the source and destination address shown may or may not be what you are looking for.  THere are two things you can do: 1.  Highlight a packet and look in the middle pane at the protocol breakdown at layer II (usually ethernet for many people these days) and see if you can't spot the MAC addresses there.  2.  If you need to see them in the summary display up top, you can change what columns are displayed, in what format, and in which order, using the Edit menu, choosing Preferences. ----- Original Message ----- From: Gregory Gordon To: [EMAIL PROTECTED] Sent: Friday, December 20, 2002 12:46 AM Subject: [Ethereal-users] Sniffing MAC Addresses Can someone give me some tips on how to sniff MAC addresses.  It seems like once I get to where I can sniff IP addresses, ports, and such, the MAC address has already been pulled apart at a lower level.  My question is more for programming a sniffer generally, but not specific to Ethereal.    How, generally is it possible to sniff MAC addresses?   Any input or ideas would be greatly appreciated.  Thanks.