Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Every device on the my LAN should have IP's along with MAC addresses, and for most of the traffic Wireshark gets on me device, the source and destination columns shows IP addresses, but sometimes it shows MAC addresses. why is that?

share|improve this question
(sorry for the syntax errors) –  itayza88 Feb 19 '13 at 17:26
I'm assuming those aren't MAC addresses, they're IPv6 addresses. –  Oliver Salzburg Feb 19 '13 at 17:28

3 Answers 3

a protocol operating at OSI layer 2 would not be able to use an IP address (Layer3), and would instead (on Ethernet type networks) address the frame via MAC address.

share|improve this answer

I'm assuming you're seeing something like this:

enter image description here

The Source and Destination addresses are always IP addresses. The difference is that they're IPv4 and IPv6 addresses.

You can actually see the involved MAC addresses for packets of either version by looking in the details pane:

enter image description here

share|improve this answer

Not all traffic has a source and destination IP address, layer 2 protocols (such as ARP) work with just MAC addresses.

If the protocol you're seeing with just MACs isn't a layer 2 one, please post more info showing exactly which protocols/packets you're not seeing an IP for..

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.