Honeypots mailing list archives
Re: MAC address
From: Olaf Gellert <og () pre-secure de>
Date: Sun, 07 Mar 2004 20:15:34 +0100
Our-team wrote:
Hello everyone,I am a graduate student and am doing a project on honeypots. Can a person get the remote MAC address of a machine. If it happens then he can see that al the ip address of virtual honeypot point to a single machine.
This depends on your definition of "remote". In your local ethernet segment, MAC addresses are broadcasted and visible (they are announced using the ARP protocol). If a packet is sent to the internet, it reaches your default gateway (usually the next router), so if it is passed on by the router, it wears the MAC address of the outgoing interface of the router. So usually the MAC address is not visible outside of your local network... Olaf -- Dipl.Inform. Olaf Gellert PRESECURE (R) Consultant, Consulting GmbH Phone: (+49) 0700 / PRESECURE og () pre-secure de
Current thread:
- MAC address Our-team (Mar 07)
- Re: MAC address Niels Provos (Mar 07)
- Re: MAC address Cedric Blancher (Mar 07)
- Re: MAC address methodyk (Mar 07)
- Re: MAC address Olaf Gellert (Mar 07)
- <Possible follow-ups>
- RE: MAC address Weaver, Woody (Mar 08)