how to find mac address on wireshark packet capture

With the filtered file still open in Wireshark, navigate to Statistics → Endpoints → Ethernet, select Copy in the bottom left hand corner, and paste into a secure document.Export the specified packets (all those displayed) as.In the Filter bar in the top left side, filter “bacnet || bacapp”. Creating an account is free, and will give you access to all sorts of support articles.

Read our instructions below, or check out the post on our support forum for a step-by-step guide with screenshots. Then, you can dig into pcaps, troubleshoot, and solve problems with ease. Changing the IP and MAC addresses will get rid of any identifying information. If your IT department doesn’t like you pulling pcaps to analyze BACnet health, your best bet is to anonymize the files. You need to get a packet capture (pcap) and upload it into Visual BACnet, but the IT department’s dead-set against it: they won’t let you upload unless you scrub the files of confidential information, so they can’t be traced back to the building. Your OT network’s acting funny, and you have no idea why.

How to find mac address on wireshark packet capture