Ask Your Question

Revision history [back]

You'll need to show more details, but if it's arp packets you're looking at, they are used to locate MAC addresses of local hosts in your network and the first 3 octets of a MAC address are usually a value assigned to a manufacturer of the network adaptor which Wireshark can resolve for you.

As such, it's likely what you're seeing is the MAC address of a NIC (or equipment) from a manufacturer in China.