This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

IP address of packet is from another country

0

Started capturing packets from my home. Found a weird IP address. Traced it back to San Francisco (I live in Canada). How is this possible?

asked 03 Jun '14, 18:16

Umpire's gravatar image

Umpire
6●1●1●3
accept rate: 0%

1

Why would packets with IP addresses from another country be any stranger than, for example, packets with IP addresses from another city in your own country? IP packets don't have to stop at a customs post and be frisked before crossing international borders.

(03 Jun '14, 18:23) Guy Harris ♦♦

P packets don't have to stop at a customs post and be frisked before crossing international borders.

I'm pretty sure that some ISPs are already working on virtual customs posts to cash in on some kind of traffic, like YouTube, youporn, etc.

(03 Jun '14, 22:39) Kurt Knochner ♦

One Answer:

1

Traced it back to San Francisco

Just a wild guess: a google or facebook server?

Post the IP address and we can tell you.

Regards
Kurt

answered 03 Jun '14, 22:42

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

162.159.241.165

(04 Jun '14, 04:49) Umpire

CloudFlare, Inc.

(04 Jun '14, 06:23) Rooster_50

CloudFlare, Inc.

...who are a company offering a service as a "front end" to Web sites, providing speed and security improvements.

Some Wireshark sites use it.

(04 Jun '14, 17:32) Guy Harris ♦♦