Better detection if the source ip is layer 2