American IP in packet capture

I m using Windows 10 and running Wireshark packet capture while CF WARP is on. Sites displaying your IP address show closest CF colo’s IP (central europe) which is the expected result. However Wireshark packet captures shows VPN connection with a CF colo in San Francisco, California. Why is it like this? Can you please explain what fields are extracted by Wireshark and what by sites built for displaying your public IP?

The IPs are often assigned approximately to CF’s headquarters, but they are not actually there when you connect to them as they are anycast.

Your public IP (the WARP one) and the IP you are connecting to are very likely gonna be different every time, so there is the discrepancy.

1 Like

In the settings of the Warp client the Cloudflare datacenter you’re connected to is displayed.

1 Like

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.