tcpdump -e will show source and dest mac address. On Apr 17, 2012, at 6:54 AM, Ray Soucy <rps at maine.edu> wrote: > tcpdump -ni eth0 'ip6 dst ff02::1' > > 06:48:48.044409 IP6 fe80::2d0:1ff:fedf:8400 > ff02::1: ICMP6, router > advertisement, length 64