Penetration Testing mailing list archives
RE: What does a network having all identical MAC addresses mean?
From: "Dixon, Wayne" <wcdixo () aurora lib il us>
Date: Tue, 13 Nov 2007 11:41:20 -0600
It sounds more like bridge-filtering. Meaning that the hotspot was using it's own mac address for every use, to mitigate anybody attempting to DDOS a particular user, or spoof their mac address. My guess is that it was keeping it's own table of each real mac, and IP and playing packet-switcher to keep it all straight. Wayne -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Paul Greene Sent: Saturday, November 10, 2007 4:49 PM To: pen-test () securityfocus com Subject: What does a network having all identical MAC addresses mean? I was in a free wi-fi hotspot the other day and just for kicks ran an NMAP scan to see how many people were logged on. I noticed something peculiar though. Every IP address had identical MAC addresses. Is this some security thing the hotspot had going on? Or is it some kind of devious thing going on by one of the other customers in the hotspot? PG ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------ ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- What does a network having all identical MAC addresses mean? Paul Greene (Nov 13)
- Re: What does a network having all identical MAC addresses mean? Orlin Gueorguiev (Nov 15)
- RE: What does a network having all identical MAC addresses mean? Mohamed Farid (Nov 15)
- Re: What does a network having all identical MAC addresses mean? arif . jatmoko (Nov 15)
- Re: What does a network having all identical MAC addresses mean? nnp (Nov 15)
- RE: What does a network having all identical MAC addresses mean? Paul Melson (Nov 15)
- Re: What does a network having all identical MAC addresses mean? Mark C at Uniontown.com (Nov 15)
- RE: What does a network having all identical MAC addresses mean? Dixon, Wayne (Nov 15)
- Re: What does a network having all identical MAC addresses mean? crazy frog crazy frog (Nov 15)
- <Possible follow-ups>
- Re: What does a network having all identical MAC addresses mean? krymson (Nov 15)