It's perfectly normal, that's the MAC address of the router. Packets from every computer in another subnet will appear in your subnet with the source mac address of the router and every packet being sent to another subnet will have the destination mac address of the router.
See http://www.eventhelix.com/RealtimeMantra/Networking/ip_routing.htm for a more detailed explanation. On 8/6/07, d a <[EMAIL PROTECTED]> wrote: > I used wireshark for Gnuttella traffiic and filtered for a specified IP > address. Every capture I make shows the MAC address of the host computer as > the same (00:04:de:a3:08:01). I checked the MAC of my NIC and it is > correctly shown each time. I dont understand why the traffic from different > host computers always comes up as the same MAC. I am certain that these are > all different computers. Its my understanding that these should be unique > for each NIC. I attached a screen capture and would appreciate an > explanation. Note that the destination MACs are identical. The other > (source) is my MAC. The red and green filters are for "syn" and Fin" > packets. > Thanks > Dave > > > ________________________________ > Moody friends. Drama queens. Your life? Nope! - their life, your story. > Play Sims Stories at Yahoo! Games. > > > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users > > > -- This information is top security. When you have read it, destroy yourself. -- Marshall McLuhan Propertarianism joined to capitalist vigor destroyed meaningful commercial competition, but when it came to making good software, anarchism won. -- Eben Moglen _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
