Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

RE: What does a network having all identical MAC addresses mean?

from [Paul Melson] Network Security [Permanent Link]
Subject: RE: What does a network having all identical MAC addresses mean?
Date: Tue, 13 Nov 2007 09:36:36 -0500 
I was in a free wi-fi hotspot the other day and just for kicks ran an NMAP

scan to see how 

many people were logged on.

I noticed something peculiar though. Every IP address had identical MAC

addresses. Is this 

some security thing the hotspot had going on? Or is it some kind of

devious thing going on 

by one of the other customers in the hotspot?


What this indicates to me is that your NMap scan passed through a router or
a bridge of some kind.  This could be caused by your scan hitting devices on
a wired network on the other side of the wireless access point.  It could
also have to do with the way local masks and routes are configured on the
access point.  Or, as you suggest, it could be the symptom of someone using
ARP poisoning to make themselves the route for all traffic on that wireless
network.  Without more information, it's difficult to make a solid
determination.

PaulM


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: What does a network having all identical MAC addresses mean?, nnp
Next by Date:  Re: What does a network having all identical MAC addresses mean?, Mark C at Uniontown.com
Previous by Thread:  Re: What does a network having all identical MAC addresses mean?, nnp
Next by Thread:  Re: What does a network having all identical MAC addresses mean?, Mark C at Uniontown.com
Indexes:  [Date] [Thread] [Top] [All Lists]