ether 03:BF:00:00:00:00????

Protecting your Linux box
Post Reply
sevensins
Havaldaar
Posts: 117
Joined: Tue Apr 13, 2004 1:45 pm
Location: PAKISTAN
Contact:

ether 03:BF:00:00:00:00????

Post by sevensins »

AOA,
There is a system on my network which has this mac address 00:b0:d0:da:2f:da and uses a linux box to access internet. the strange this is that when I arp -aven I get 03:BF:00:00:00:00 against his ip in the arp list...


any idea????
Regards,

-----------------------------------------------------------------
A wise monkey never monkies w/ another monkey's monkey!
LinuxFreaK
Site Admin
Posts: 5132
Joined: Fri May 02, 2003 10:24 am
Location: Karachi
Contact:

Re:

Post by LinuxFreaK »

Dear sevensins,
Salam,

might be he have spoofed his MAC.

Best Regards.
Farrukh Ahmed
sevensins
Havaldaar
Posts: 117
Joined: Tue Apr 13, 2004 1:45 pm
Location: PAKISTAN
Contact:

Post by sevensins »

AOA,
I just googled and came up with this

03-BF-00-00-00-00/16 MS-Loadbalancing-Multicast

at http://ftp.tpnet.pl/vol/d6/ftp.sunet.se ... /manuf.txt


ahh still dont get it.....any help would be much appreciated...


I am using ur mac script and if someone is not in the allow list... they can not access the servers services...
Last edited by sevensins on Wed May 24, 2006 3:10 pm, edited 1 time in total.
Regards,

-----------------------------------------------------------------
A wise monkey never monkies w/ another monkey's monkey!
dK-Stinger
Cadet
Posts: 2
Joined: Sat Jun 03, 2006 8:36 pm
Location: Lahore, Pakistan
Contact:

Post by dK-Stinger »

tough it is higly unlikely, but try restarting the switch on which the system is on. and as a last resort, change the user's port on the switch. if u cud tell me what network devices u use, i might be able to figure out...
wat wat wattt???
Post Reply