LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 06-05-2012, 05:09 AM   #1
wez
LQ Newbie
 
Registered: Jun 2012
Location: The Netherlands
Distribution: Ubuntu 12:04 LTS
Posts: 4

Rep: Reputation: Disabled
Different MAC router when scanning with nmap


Hi,
I'm doing some testing on my network and having the following outcome for
sudo nmap -sV -vv -PN 192.168.1.1:

PORT STATE SERVICE VERSION
80/tcp open http Linksys WAG200GB WAP http config
443/tcp open tcpwrapped
1863/tcp open tcpwrapped
1864/tcp open tcpwrapped
4443/tcp open tcpwrapped
5190/tcp open tcpwrapped
5566/tcp open tcpwrapped
49152/tcp open http Intel UPnP reference SDK httpd 1.2 (UPnP 1.0, platform Linux 2.4.17_mvl21-malta-mips_fp_le)
MAC Address: xx:xx:xx:xx:80:32 (Cisco-Linksys)
Service Info: OS: Linux; Device: WAP


When I check the status in my Linksys router (thru web-interface), I see the following:

MAC Address: xx:xx:xx:xx:80:33 For gateway

Tought the mac was a "unique identifier" for the router.
Is it correct that th're two MAC's, One for local one for gateway? Or is it spoofed?

Thanks in advance!

Last edited by wez; 06-05-2012 at 08:21 AM.
 
Old 06-05-2012, 09:58 PM   #2
evo2
LQ Guru
 
Registered: Jan 2009
Location: Japan
Distribution: Mostly Debian and Scientific Linux
Posts: 5,753

Rep: Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288Reputation: 1288
Hi,

different network devices will have different mac addresses. Presumably you are looking at one of the internal interfaces when you run nmap, and are looking at the external interface when you use the web interface.

Evo2.
 
1 members found this post helpful.
Old 06-05-2012, 10:00 PM   #3
AwesomeMachine
Senior Member
 
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora; Mint
Posts: 2,570

Rep: Reputation: 454Reputation: 454Reputation: 454Reputation: 454Reputation: 454
Yes, there are two MACs. But one is only in reference to the unique MAC. You can usually change the nonunique one to anything you want.
 
1 members found this post helpful.
Old 06-06-2012, 02:28 PM   #4
wez
LQ Newbie
 
Registered: Jun 2012
Location: The Netherlands
Distribution: Ubuntu 12:04 LTS
Posts: 4

Original Poster
Rep: Reputation: Disabled
Thanks, Seniors!!

Wez

Last edited by wez; 06-06-2012 at 02:31 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] nmap scanning domain names smithy2010 Linux - Newbie 2 05-31-2012 11:09 AM
LXer: Scanning your LAN for conficker using nmap LXer Syndicated Linux News 0 07-01-2009 03:10 AM
OS detection and port scanning without nmap. User Name. Linux - Security 5 09-07-2006 08:42 AM
nmap scanning techniques metallica1973 Linux - Security 4 10-24-2005 10:16 PM
Nmap 3.93 scanning problems ? memo007 Linux - Software 1 09-21-2005 05:45 AM


All times are GMT -5. The time now is 02:37 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration