SirDice:

Since the source and destination are private addresses and the mac address is listed, wouldn't the device have to be on the inside?