RE: Re[2]: bridge detection

From: David Gillett (gillettdavid_at_fhda.edu)
Date: 12/29/04

  • Next message: Andrew Shore: "RE: Recover SCO UNIX root password" 
    To: "'P. Schmiel'" <secfoc@cybernox.net>, <security-basics@securityfocus.com>
Date: Wed, 29 Dec 2004 11:16:17 -0800

      Bridges USE the layer 2 header information to perform their function.
    They don't *change* it, though, so their MAC address won't show up in
    the traffic.

      [The original poster used "bridge", but I believe he actually meant
    "gateway"; I believe he included an apology that English is not his first
    language....
      Gateways, of course, DO change the MAC address of traffic they handle --
    to whatever the owner wants! Very often, it's a clone of the MAC address
    of a single device previously at that location, so that the provider sees
    no change even though the device has been replaced.]

    David Gillett

    > -----Original Message-----
    > From: P. Schmiel [mailto:secfoc@cybernox.net]
    > Sent: Tuesday, December 28, 2004 4:31 PM
    > To: security-basics@securityfocus.com
    > Subject: Re[2]: bridge detection
    >
    >
    > bridges are layer2 devices, so maybe you can take a look at the source
    > MAC address.
    >
    > greetings
    > Pascal Schmiel
    > schmiel@cybernox.net
    >

  • Next message: Andrew Shore: "RE: Recover SCO UNIX root password"

    Relevant Pages

    • Re: Ethernet > WiFi adaptor with WPA?
      ... support multiple Mac's etc ..? ... Be warned that there are limits on how many MAC addresses (not Mac ... computers) these low-end bridges can handle -- some bridges (often but ... John Navas FAQ for Wi-Fi: ...
      (alt.internet.wireless)
    • Re: MAC layer for a switch and a router
      ... MAC layer can be divided in several sublayers. ... First services (for basic routers) are those specified by the OSI ... The most basic bridges also operate this way, even if they have a MAC ...
      (comp.dcom.lans.ethernet)
    • Re[2]: bridge detection
      ... bridges are layer2 devices, so maybe you can take a look at the source ... MAC address. ... Pascal Schmiel ...
      (Security-Basics)
    • Re: IpTraffic encloded in EthBroadcasts should be routed
      ... The Sender doenst know the gateway IP and also not the ... :Gateway mac. ... Thats the reason why Its an broadcast. ... You mean something like ICMP Router Discovery, ...
      (comp.dcom.lans.ethernet)
    • Re: Convention User Woas
      ... gateway, they're not able to reach off the LAN either, as most operating ... Where they st00pid enough to not spoof the MAC address as well? ... If this is a _wired_ network, you can set your switch so that it knows on ... with some APs you can set them so there is no client to client traffic ...
      (comp.dcom.lans.ethernet)