The ip-address of a pcap file “question”

pcapng
IP
retag add tags

Hi everyone,

I'm an beginning IT student with zero wireshark knowledge. The objective is to find "interesting" activities in a pcap file we've received from school. First of all I need to find out what the IP-address is of the person who owned the pcap file.

I've already found multiple addresses and a few that show up a lot (one of those are probably the IP-address I'm looking for). Any Idea how I can find that.

QuestionMark123

asked 2018-05-09 18:45:43 +0000

edit flag offensive 0 remove flag close merge delete

Comments

What do you mean by "the IP-address ... of the person who owned the pcap file"? Do you mean "the IP address of the machine on which the capture was done"?

Guy Harris (2018-05-09 21:39:54 +0000) edit

Yes that’s right! I’m looking for the ip address of the person who did the capturing!

QuestionMark123 (2018-05-10 05:52:49 +0000) edit

add a comment see more comments

Be the first one to answer this question!

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

The ip-address of a pcap file “question” edit

Comments

Be the first one to answer this question!

The ip-address of a pcap file “question”