From: Dixon, Wayne (wcdixo@aurora.lib.il.us)
Date: Tue Nov 13 2007 - 12:41:20 EST
It sounds more like bridge-filtering. Meaning that the hotspot was
using it's own mac address for every use, to mitigate anybody attempting
to DDOS a particular user, or spoof their mac address. My guess is that
it was keeping it's own table of each real mac, and IP and playing
packet-switcher to keep it all straight.
Wayne
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Paul Greene
Sent: Saturday, November 10, 2007 4:49 PM
To: pen-test@securityfocus.com
Subject: What does a network having all identical MAC addresses mean?
I was in a free wi-fi hotspot the other day and just for kicks ran an
NMAP scan to see how many people were logged on.
I noticed something peculiar though. Every IP address had identical MAC
addresses. Is this some security thing the hotspot had going on? Or is
it some kind of devious thing going on by one of the other customers in
the hotspot?
PG
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:12 EDT