Penetration Testing mailing list archives

Re: DoS/DDoS Attack


From: Steve Friedl <steve () unixwiz net>
Date: Fri, 14 Jan 2005 12:01:41 -0800

On Fri, Jan 14, 2005 at 01:26:55PM -0500, seditiosus wrote:
Correct me if I am wrong, but, I understand that the MAC address is
left unchanged and can be used to identify the source.

Sorry, you're wrong :-)

The MAC address is at a layer *below* IP and doesn't generally
travel past the local segment.

Steve

--- 
Stephen J Friedl | Security Consultant |  UNIX Wizard  |   +1 714 544-6561
www.unixwiz.net  | Tustin, Calif. USA  | Microsoft MVP | steve () unixwiz net


Current thread: