Ask Your Question

Revision history [back]

If you filter on udp.dstport == 5353 you can see all those chatty devices announcing themselves on the network. There you can learn MAC addresses and tell who is who on the network.

Abids-iPad.local: type AAAA, class IN, cache flush, addr fe80::18a1:587c:7995:a341

With that Link-Local address you can see the MAC address and use that as filter. (Use http://www.sput.nl/cgi-bin/cgi-llmac if you are lazy or in a hurry.)

But there is no traffic to be found with eth.addr == 1A:A1:58:95:A3:41 so that might be traffic using a different network.