RE: What does a network having all identical MAC addresses mean?

["Dixon, Wayne" <wcdixo () aurora lib il us>]

It sounds more like bridge-filtering.  Meaning that the hotspot was
using it's own mac address for every use, to mitigate anybody attempting
to DDOS a particular user, or spoof their mac address.  My guess is that
it was keeping it's own table of each real mac, and IP and playing
packet-switcher to keep it all straight.

Wayne


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Paul Greene
Sent: Saturday, November 10, 2007 4:49 PM
To: pen-test () securityfocus com
Subject: What does a network having all identical MAC addresses mean?


I was in a free wi-fi hotspot the other day and just for kicks ran an 
NMAP scan to see how many people were logged on.

I noticed something peculiar though. Every IP address had identical MAC 
addresses. Is this some security thing the hotspot had going on? Or is 
it some kind of devious thing going on by one of the other customers in 
the hotspot?

PG

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------