NTP uses UDP pakets - UDP is sent with IP-header and IP-header is sent with MAC-header. See: http://www.networksorcery.com/enp/protocol/ntp.htm
So I think there should also be the MAC address available. -Hannu ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, May 17, 2003 7:06 PM Subject: RE: [Ethereal-users] MAC and IP I might be mistaken (It's been ages since I had my TCP classes in college), but I *think* the MAC address is part of the header attached to every TCP packet (Along with things like source IP, destination IP, sequence number, etc). > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Hannu Sehm > Sent: Saturday, May 17, 2003 11:03 AM > To: [EMAIL PROTECTED] > Subject: [Ethereal-users] MAC and IP > > > I would like to identify computers contacting my NTP-server. > I can see the IP addresses with: > tethereal n -R udp.port==123 > > but I need also identify MAC address. Is that possible and how? > > Thanks, > > -Hannu > > _______________________________________________ > Ethereal-users mailing list > [EMAIL PROTECTED] > http://www.ethereal.com/mailman/listinfo/ethereal-users > >
