Re: Is it one way to detect honeypot?

[Olaf Gellert <og () pre-secure de>]

wanfat wu wrote:

>   By looking at the MAC address, all the MAC are the same! Is it one way 
> to detect honeypot? Anything to hide my honeypot?
Well, this is a way to detect a honeypot. But how do you
get access to the MAC addresses? Usually you can only
see MAC addresses in the local network segment. If an
attacker comes from somewhere else (and usually this
really should be the case) I think it will be difficult
to get the MAC addresses.

Cheers, Olaf

-- 
Dipl.Inform. Olaf Gellert                  PRESECURE (R)
Consultant,                              Consulting GmbH
Phone: (+49) 0700 / PRESECURE           og () pre-secure de