On Wed, Mar 20, 2013 at 10:33 PM, <nick@xxxxxxxxxxxxxxxxxxxxxxxx> wrote: > > Here is another example, taken from Wireshark. > It's an ARP response, effectively saying IP address 192.168.0.107 is at 00:03:7f:20:50:59 > > This is a message coming out of the wifi adaptor, and the above numbers are the IP address, and MAC address of the wifi device. > > 7f 20 50 59 00 24 00 03 7f 20 50 59 08 06 00 01 > 08 00 06 04 00 02 00 03 7f 20 50 59 c0 a8 00 07 > 20 cf 30 94 83 7b c0 a8 00 65 > > What we see here is the Destination MAC address is 7f:20:50:59:00:24 (first 6 bytes). > But that's wrong. It should be 20:cf:30:94:83:7b . > > The other parts look right though: > 00:03:7f:20:50:59 is the MAC of the wifi device. > c0 a8 00 65 is 192.168.0.101 which is the IP address of the destination. > c0 a8 00 07 is the IP address of the wifi adaptor itself. let us check in ath6kl_wmi_dix_2_dot3, that should give us some clue. > > So, where in the code is the first 6 bytes generated ? > > > Regards > > Nick -- thanks, shafi -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html