

If we right click on the source MAC address field and select Apply as a filter, we get the following syntax: Luckily, Wireshark can perform number name resolution for MAC addresses. The problem with the question is that Apple for example may have dozens or hundreds of OUI's. The OUI is essentially the first 24 bits of the MAC address field (it is actually 22 bits - detail details). Great question, and one I get all the time.Īs most of you know, the manufacturer of a networking device that uses MAC addressing can be identified by the OUI - Organizationally Unique Identifier.

Our Udemy course on Wireless Packet capture Our custom profiles repository for Wireshark

0 of 5 - 0 votes Thank you for rating this article.Ĭheck out these great references as well:
