OmniPeek Support

filter on Calculate implied transmitter

EMu
Posts: 4
Joined: Wed Nov 15, 2017 6:38 am

filter on Calculate implied transmitter

Postby EMu » Wed Apr 04, 2018 1:40 am

When a client or AP sends an Acknowledge frame its own mac address is not part of the frame. Omnipeek will calculate its source address if switched on (Calculate implied transmitter), when Omnipeek succeed it will appear in italic.
I made a filter on the MAC of a client. How can I make sure that I see the acknowledged frames from this client

DJWP
Posts: 687
Joined: Tue Oct 30, 2007 11:42 am

Re: filter on Calculate implied transmitter

Postby DJWP » Thu Apr 05, 2018 8:49 am

After you have filtered on the node's MAC either pre or post capture, you can check the resulting data and isolate the frames you are interested in by filtering on the TCP flags-


Return to “OmniPeek Support”

Who is online

Users browsing this forum: No registered users and 1 guest