RE: Wireless security & MAC Adress spoofing

[Steven Trewick <STrewick () joplings co uk>]

> How does anybody that want to spoof a MAC address to connect 
> to a wireless
> AP know the right MAC's in the real life?

By "sniffing" the network for 802.11 frames
 
> Are the MAC numbers send along in Cleartext?

Yes, even when WEP is enabled


> Is sniffing the wireless network enough to get hold of the 
> connecting MAC addresses?

Yes.

Have a look at section 4.2 of this document, which describes this 
in the contect of an attack.

http://www.cs.umd.edu/~waa/wireless.pdf


HTH



'-)























The information contained in this e-mail is confidential and may be privileged, it is intended for the addressee only. 
If you have received this e-mail in error please delete it from your system. The statements and opinions expressed in 
this message are those of the author and do not necessarily reflect those of the company. Whilst Joplings Group 
operates an e-mail anti-virus program it does not accept responsibility for any damage whatsoever that is caused by 
viruses being passed.
joplings.co.uk