OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: MAC addresses
From: Marc (marcEEYE.COM)
Date: Sat Aug 05 2000 - 19:58:18 CDT

The MAC address blackice is giving is is going to be the MAC for the
gateway.

Most of the time there is not a way to get a MAC address of a remote system
except for maybe via NetBIOS.

Go play with libpcap and libnetNT,
http://www.eeye.com/html/Databases/Software/libnetnt.html

Signed,
Marc Maiffret
Chief Hacking Officer
eCompany / eEye
T.949.675.8160
F.949.675.8191
http://eEye.com

| -----Original Message-----
| From: Focus on Microsoft Mailing List
| [mailto:FOCUS-MSSECURITYFOCUS.COM]On Behalf Of Ruud van Buren
| Sent: Saturday, August 05, 2000 12:25 AM
| To: FOCUS-MSSECURITYFOCUS.COM
| Subject: MAC addresses
|
|
| Hi,
|
| I've got a question about MAC addresses. On my Windows machine I use the
| BlackICE Defender firewall among others, wich most of the time
| can find the
| MAC address of a intruder. Does anybody know in wich way a MAC
| address of a
| remote computer can be retrieved and if there is a way to block it?
| References to books, web pages, etc.
| that would provide more insight we be useful too.
|
| Thanks a lot,
|
| Ruud van Buren
| rvanburenquiltweb.nl
|