Re: spoofing the ethernet address

[mikael.olsson () ENTERNET SE (Mikael Olsson)]

"Bobby, Paul" wrote:
> The ethernet address (MAC) is the address of the sending machine.
>
> Is it possible to spoof this address also? Would someone have to write a
> custom ethernet driver?

It is possible to do, and  most any packet sniffer capable of sending
packets of its own can do this.
There aren't really any APIs to do it, so you'll most likely have to add
your own hook between the IP layer and the media layer (differently done
in different types of OS:es, but basically the same idea), but it'll
still be NIC independent, which is good.


--
Mikael Olsson, EnterNet Sweden AB, Box 393, S-891 28 ÖRNSKÖLDSVIK
Phone: +46 (0)660 105 50           Fax: +46 (0)660 122 50
Mobile: +46 (0)70 248 00 33
WWW: http://www.enternet.se        E-mail: mikael.olsson () enternet se