RE: What does a network having all identical MAC addresses mean?

I was in a free wi-fi hotspot the other day and just for kicks ran an NMAP
scan to see how
many people were logged on.

I noticed something peculiar though. Every IP address had identical MAC
addresses. Is this
some security thing the hotspot had going on? Or is it some kind of
devious thing going on
by one of the other customers in the hotspot?

What this indicates to me is that your NMap scan passed through a router or
a bridge of some kind. This could be caused by your scan hitting devices on
a wired network on the other side of the wireless access point. It could
also have to do with the way local masks and routes are configured on the
access point. Or, as you suggest, it could be the symptom of someone using
ARP poisoning to make themselves the route for all traffic on that wireless
network. Without more information, it's difficult to make a solid
determination.

PaulM


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • Re: Outlook web access OWA using while wireless Login problem HELP!
    ... check for http/https timeout periods on the WAP (wireless access point). ... mention this as you say it is fine when connected over your wired network. ... access OWA using a wireless network I can login with no problem and ... access my mail but shotly after the login prompt comes up again. ...
    (microsoft.public.exchange.admin)
  • RE: Wireless or wired but not at same time
    ... You could create the same VLANs as the users are currently in on your wired network. ... Then don't forget to create your ACLs to only allow Guest to go to the Internet, blocking all internal nets. ... I have to create a wireless access in all the conference room. ... We will use cisco material to do this. ...
    (Security-Basics)