Ask Your Question
0

Because the IP WAN appears in the source column and not the LAN

asked 2019-04-08 00:39:05 +0000

Robin gravatar image

updated 2019-04-08 09:54:06 +0000

grahamb gravatar image

I attach an example:

73314   2019-04-05 11:35:23.521615  200.72.45.230   200.72.1.253    DNS 76  Standard query 0x731e A www.facebook.com

Indicate that the source IP is that of my team, but instead of the lan, the wan appears.

edit retag flag offensive close merge delete

Comments

I'm unable to understand your question, where does the "WAN" appear in the above packet excerpt, where is the "LAN", what is your "team", remember we don't know your network.

grahamb gravatar imagegrahamb ( 2019-04-08 09:55:25 +0000 )edit

1 Answer

Sort by » oldest newest most voted
0

answered 2019-04-09 17:02:03 +0000

Hi,

Not really a Wireshark question but I'm going to guess you are seeing the effect of NAT. (en español)

You are probably capturing the packet on the WAN side of your device and seeing the WAN IP address as the source IP address.

If you captured the same packet on the LAN side than you probably would see the "TEAM" IP address you were expecting.

[SRC IP: EXPECTED ("TEAM") IP]
[DST IP: 200.72.1.253]

| LAN SIDE
|----------
(DEVICE PERFORMS SOURCE NAT)
|----------
| WAN SIDE
V

[SRC: 200.72.45.230]
[DST: 200.72.1.253]

Hope this helps.

Cheers,

JF

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-04-08 00:39:05 +0000

Seen: 547 times

Last updated: Apr 09 '19