Revision history  [back]

Wireshark does nothing more than showing you what's in the packet, interpreted according to the present standards and insights. So in that light, yes the IP addresses shown in Wireshark are those in the packet.

If you have a particular situation where this is not the case we sure would like to hear about it.