Sir, I must Thank to Wireshark team ,For Developing Such a Master Class tool "the wireshark" Query: i am Capturing STP (spanning tree) traffic and Surprised about why source mac is Unique not exist In My Network Where Destination and Root bridge mac is Known 2,i capture on another switch this time another Source mac address is not exist on my device neither switch...whosse mac is this asked 23 Jan '14, 21:07  sandeep edited 24 Jan '14, 01:44  Kurt Knochner ♦ |
One Answer:
When sending BPDU frames, a switch uses the MAC address of each single switch port as source MAC. It should be quite close to the base mac (which is part of the bridge ID), incremented by one for each port number. So if your base MAC of your switch is 00:01:02:03:04:00 the first port usually has 00:01:02:03:04:01, port two has 00:01:02:03:04:02,..., port 10 has 00:01:02:03:04:0a, and so on. answered 24 Jan '14, 00:13  Jasper ♦♦ edited 24 Jan '14, 00:13 |
