Honeypots mailing list archives

Re: MAC address


From: Olaf Gellert <og () pre-secure de>
Date: Sun, 07 Mar 2004 20:15:34 +0100

Our-team wrote:
Hello everyone,
I am a graduate student and am doing a project on honeypots. Can a person get the remote MAC address of a machine. If it happens then he can see that al the ip address of virtual honeypot point to a single machine.

This depends on your definition of "remote". In your local
ethernet segment, MAC addresses are broadcasted and visible
(they are announced using the ARP protocol).

If a packet is sent to the internet, it reaches your
default gateway (usually the next router), so if it
is passed on by the router, it wears the MAC address
of the outgoing interface of the router. So usually
the MAC address is not visible outside of your local
network...

Olaf

--
Dipl.Inform. Olaf Gellert                  PRESECURE (R)
Consultant,                              Consulting GmbH
Phone: (+49) 0700 / PRESECURE           og () pre-secure de


Current thread: