Re: Detecting Spoofed MAC

["crazy frog crazy frog" <i.m.crazy.frog () gmail com>]

try arpwatch for windows.if two ips are having same mac then u can
determine tht easily with this utility .

On 29 Nov 2006 09:44:36 -0000, divinepresence () gmail com
<divinepresence () gmail com> wrote:
> Hi all
> Is there a tool to determine whether the MAC has been spoofed on a system (Win/*nix) for a given interface? Also, is it 
> possible to know the real MAC in such a case? I was wondering if you could hook up to some system info API which would 
> provide you with this information assuming that this detail is stored at some location which is not affected by 
> spoofing.
>
> Thanks
> Ankur Jindal


--
---------------------------------------
http://www.secgeeks.com
Submit you security articles,send them to paper () secgeeks com

http://www.newskicks.com
Submit and kick for new stories from all around the world.
---------------------------------------