I attach an example:
73314 2019-04-05 11:35:23.521615 200.72.45.230 200.72.1.253 DNS 76 Standard query 0x731e A www.facebook.com
Indicate that the source IP is that of my team, but instead of the lan, the wan appears.
Hi,
Not really a Wireshark question but I'm going to guess you are seeing the effect of NAT. (en español)
You are probably capturing the packet on the WAN side of your device and seeing the WAN IP address as the source IP address.
If you captured the same packet on the LAN side than you probably would see the "TEAM" IP address you were expecting.
[SRC IP: EXPECTED ("TEAM") IP]
[DST IP: 200.72.1.253]
| LAN SIDE
|----------
(DEVICE PERFORMS SOURCE NAT)
|----------
| WAN SIDE
V
[SRC: 200.72.45.230]
[DST: 200.72.1.253]
Hope this helps.
Cheers,
JF
Asked: 2019-04-08 00:39:05 +0000
Seen: 549 times
Last updated: Apr 09 '19
I'm unable to understand your question, where does the "WAN" appear in the above packet excerpt, where is the "LAN", what is your "team", remember we don't know your network.