Case where 0.0.0.0 gets assigned to MAC addresses

CoalfireFederal / NetFrenzy

Import a pcap file into Neo4j and view the network graph. Maintainer: @djent-

GNU Affero General Public License v3.0

16 stars 1 forks source link

Case where 0.0.0.0 gets assigned to MAC addresses #5

Closed Djent- closed 2 years ago

Djent- commented 2 years ago

This happens during DHCP. Obviously the MAC address doesn't have an IP to begin with, so Wireshark reports it as 0.0.0.0. Not really a bug. Operators should exclude this from queries (it probably won't appear in any except for the most broad anyway)