Looking at a wireshark capture, I'm seeing something really strange. Ethernet II packets with random data are being sent on the network. The larger packets in the capture seem to contain bits and pieces of http, but the src/dst don't make any sense at all.
Both src and dst mac addresses are random.... neither exist on my network. The funny thing is, the src/dst randomly change with each packet.
About 1-3 packets/sec. Unable to find either src or dst mac in the switch tables.
Any ideas as to what this traffic is?
See .pcap file from cloudshark below.
http://cloudshark.org/captures/eca6e20e1835
Any help would be appreciated. My mind is boggled. I would love to know how to track down the culprit of these packets!
A