Page 1 of 1

What is this IP/MAC that shows up on Wireshark when connected to a SoftEther VPN?

Posted: Wed Jul 23, 2025 8:57 pm
by Rational
Hello,
I'm using SoftEther on a Windows 10 computer (both client and server). On Wireshark I see these 4 lines repeating:

Code: Select all

3  4.151683  192.168.30.1		7	192.168.30.255			7	ECHO	80  Request
4  4.151683  SECURENAT_MAC			Broadcast				ARP		42  192.168.30.1 is at SECURENAT_MAC
5  5.134210  00:ae:5d:cd:52:d2			CLIENT_MAC				ARP		42  Who has 192.168.30.11? Tell 172.31.94.206
6  5.134222  CLIENT_MAC				00:ae:5d:cd:52:d2			ARP		42  192.168.30.11 is at CLIENT_MAC
My question is, who is 172.31.94.206/00:ae:5d:cd:52:d2? I don't have any device with that IP or MAC and "00:ae:5d" is not in the list of MAC registered names. Is this some hard-coded IP/MAC that SoftEther uses?

Thank you for any help!

Re: What is this IP/MAC that shows up on Wireshark when connected to a SoftEther VPN?

Posted: Thu Jul 24, 2025 1:18 am
by solo

Re: What is this IP/MAC that shows up on Wireshark when connected to a SoftEther VPN?

Posted: Thu Jul 24, 2025 2:56 am
by Rational
Thank you so much 🙏