Difference between revisions of "MAC"
m |
|||
| Line 4: | Line 4: | ||
A MAC address with all bits sets (also known as FF:FF:FF:FF:FF:FF) is a special address and means that it is a [[broadcast]] (all stations on a LAN are addressed). A MAC address where the first bit is set indicates that this address is a [[multicast]] address. Since the bitorder of Ethernet is [[little endian|little-endian]] meaning the least significant bit is first it really is the very first bit as the address is read through the Ethernet. | A MAC address with all bits sets (also known as FF:FF:FF:FF:FF:FF) is a special address and means that it is a [[broadcast]] (all stations on a LAN are addressed). A MAC address where the first bit is set indicates that this address is a [[multicast]] address. Since the bitorder of Ethernet is [[little endian|little-endian]] meaning the least significant bit is first it really is the very first bit as the address is read through the Ethernet. | ||
| + | |||
| + | To see the MAC addresses of the machines on your subnet: | ||
| + | arp -a | ||
| + | |||
| + | |||
| + | == MAC address spoofing == | ||
| + | |||
| + | [http://slagheap.net/etherspoof/ MacOSX] | ||
| + | |||
| + | [http://www.klcconsulting.net/Change_MAC_w98.htm Win98] | ||
| + | |||
| + | [http://www.bsdatwork.com/2004/06/19/mac_spoofing_on_freebsd/ FreeBSD using netgraph] | ||
| + | |||
| + | [http://whoozoo.co.uk/mac-spoof-linux.htm Linux] | ||
Revision as of 11:41, 4 December 2005
MAC stands for Media Access Control. An Ethernet card has a MAC address to identify it which is identified in the OSI layer 2 frame that it outputs to speak on the LAN. This is a 48 bit number which makes the address space larger than the Internet's address space. The first 24 bits are registered with the IEEE, and thus you can identify what Ethernet card maker is by its address (and possibly what model of card as well).
A MAC address with all bits sets (also known as FF:FF:FF:FF:FF:FF) is a special address and means that it is a broadcast (all stations on a LAN are addressed). A MAC address where the first bit is set indicates that this address is a multicast address. Since the bitorder of Ethernet is little-endian meaning the least significant bit is first it really is the very first bit as the address is read through the Ethernet.
To see the MAC addresses of the machines on your subnet:
arp -a
