Here is another example, taken from Wireshark. It's an ARP response, effectively saying IP address 192.168.0.107 is at 00:03:7f:20:50:59 This is a message coming out of the wifi adaptor, and the above numbers are the IP address, and MAC address of the wifi device. 7f 20 50 59 00 24 00 03 7f 20 50 59 08 06 00 01 08 00 06 04 00 02 00 03 7f 20 50 59 c0 a8 00 07 20 cf 30 94 83 7b c0 a8 00 65 What we see here is the Destination MAC address is 7f:20:50:59:00:24 (first 6 bytes). But that's wrong. It should be 20:cf:30:94:83:7b . The other parts look right though: 00:03:7f:20:50:59 is the MAC of the wifi device. c0 a8 00 65 is 192.168.0.101 which is the IP address of the destination. c0 a8 00 07 is the IP address of the wifi adaptor itself. So, where in the code is the first 6 bytes generated ? Regards Nick -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
