Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I executed ping fron machine A (wireless PC) to machine B (wired PC to the wireless router). When I check the packets in machine B with wireshark they have the source address of the router ( I would expect the source address to be the one of the machine A ( the one pinging. What is the correct behavior?

share|improve this question
The packets are being sent by the router this is the corect behavior. – Ramhound Nov 22 '12 at 4:20

The source address of the packet would be the address of the last interface the packet has left to get to the destination, which in this case, would be your router.

share|improve this answer
I would have expected the MAC to change but not the source IP. The IP doesn't change when I ping from work to home. – Mario Nov 22 '12 at 6:42
@Mario Normally the wireless router uses NAT, so it can handle multiple connections (usually about 250). – ott-- Nov 22 '12 at 7:45
@Mario The source MAC address will stay the same throughout the journey. – Hammo Nov 22 '12 at 22:05

I rebooted the router (d-link with DDWRT) now it works ok. The IP source address is the one of the machine (interface) that is the source of the packet, not the one of the router.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .