RE: Re[2]: bridge detection
From: David Gillett (gillettdavid_at_fhda.edu)
Date: 12/29/04
- Previous message: threepts_at_whaddu.com: "Re: Wireless security question"
- In reply to: P. Schmiel: "Re[2]: bridge detection"
- Next in thread: Aaron Berg: "Re: bridge detection"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "'P. Schmiel'" <secfoc@cybernox.net>, <security-basics@securityfocus.com> Date: Wed, 29 Dec 2004 11:16:17 -0800
Bridges USE the layer 2 header information to perform their function.
They don't *change* it, though, so their MAC address won't show up in
the traffic.
[The original poster used "bridge", but I believe he actually meant
"gateway"; I believe he included an apology that English is not his first
language....
Gateways, of course, DO change the MAC address of traffic they handle --
to whatever the owner wants! Very often, it's a clone of the MAC address
of a single device previously at that location, so that the provider sees
no change even though the device has been replaced.]
David Gillett
> -----Original Message-----
> From: P. Schmiel [mailto:secfoc@cybernox.net]
> Sent: Tuesday, December 28, 2004 4:31 PM
> To: security-basics@securityfocus.com
> Subject: Re[2]: bridge detection
>
>
> bridges are layer2 devices, so maybe you can take a look at the source
> MAC address.
>
> greetings
> Pascal Schmiel
> schmiel@cybernox.net
>
- Previous message: threepts_at_whaddu.com: "Re: Wireless security question"
- In reply to: P. Schmiel: "Re[2]: bridge detection"
- Next in thread: Aaron Berg: "Re: bridge detection"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
