LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 03-06-2012, 11:20 AM   #1
niharikaananth
Member
 
Registered: Aug 2011
Posts: 58

Rep: Reputation: Disabled
find out original MAC address


Hi..Linux Guru.
I know that we can easily find out other computer's MAC address using arp command. But if anybody has changed his/her system's MAC address in windows/linux, then this command shows that duplicate MAC address. So is it possible to find out the original MAC address even the users on a LAN changes their system's MAC address?
This is because we running squid proxy server and given internet access for only authorized systems i.e
1) particular IP should be with particular MAC address.
2) only particular MAC with any IP address.
The clients can access the internet only in these two instance and there is no internet access if they change either IP or MAC in the first instance. But if they changes both which is already bound to some other machine then they can access the internet. In the 2nd one even restricted systems can access the internet with any IP if they change their system's MAC address with authorized MAC address of squid.conf file.
So it would be appreciated if anybody could show the possible way to find out the original MAC address(as written in BIOS) of the LAN computers.
 
Old 03-06-2012, 11:51 AM   #2
kbscores
Member
 
Registered: Oct 2011
Location: USA
Distribution: Red Hat
Posts: 259
Blog Entries: 9

Rep: Reputation: 32
You might be able to see it with kudzu or in /etc/sysconfig/hwconf. It would be listed as network.hwaddr.
 
1 members found this post helpful.
Old 03-06-2012, 12:37 PM   #3
niharikaananth
Member
 
Registered: Aug 2011
Posts: 58

Original Poster
Rep: Reputation: Disabled
Thanks kbscores,
Sorry, I forgot to mention the O/S, I am using Ubuntu-11.10, But I couldn't find hwconf file anywhere.
#ls -l /etc/sysconfig/hwconf
ls: cannot access /etc/sysconfig/hwconf: No such file or directory

#find . / -name hwconf

#dpkg --get-selections kudzu
No packages found matching kudzu.

So how can I install this package on ubutnu. I searched the package using Ubuntu software centre and found a package called hwdata(for hardware identification/configuration data) which was already installed. If I have to go through this, then which file I have to refer.

Last edited by niharikaananth; 03-06-2012 at 12:38 PM.
 
Old 03-06-2012, 12:41 PM   #4
Cedrik
Senior Member
 
Registered: Jul 2004
Distribution: Slackware
Posts: 2,140

Rep: Reputation: 242Reputation: 242Reputation: 242
Why use IP and Mac address as authentication method while both can easily be changed ?

Last edited by Cedrik; 03-06-2012 at 12:42 PM.
 
2 members found this post helpful.
Old 03-06-2012, 01:24 PM   #5
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
Quote:
Originally Posted by niharikaananth
So it would be appreciated if anybody could show the possible way to find out the original MAC address(as written in BIOS) of the LAN computers.
You can't from another host (i.e. for the purposes of access control). You'll see the MAC address that the system is presenting to its peers.

(And MAC address is not written in BIOS; it's in the firmware of each network device itself.)

-------

edit: If you want to monitor whether someone has changed a MAC address after the fact (read: you'll need to have captured the original MAC address first), you can use a utility like arpwatch.

Last edited by anomie; 03-06-2012 at 01:26 PM.
 
1 members found this post helpful.
Old 03-06-2012, 04:12 PM   #6
jefro
Moderator
 
Registered: Mar 2008
Posts: 15,388

Rep: Reputation: 2199Reputation: 2199Reputation: 2199Reputation: 2199Reputation: 2199Reputation: 2199Reputation: 2199Reputation: 2199Reputation: 2199Reputation: 2199Reputation: 2199
I agree that this method stinks since it all can be edited. Unless you go to that computer and use root access to diag it, you can't be sure.


Use certificate based authentication or some shared key.
 
1 members found this post helpful.
Old 03-07-2012, 09:06 AM   #7
niharikaananth
Member
 
Registered: Aug 2011
Posts: 58

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by anomie View Post
(And MAC address is not written in BIOS; it's in the firmware of each network device itself.)
you'll need to have captured the original MAC address first, you can use a utility like arpwatch.
Thanks anomie and thank you all
I got confused with network information in BIOS, thanks for your kind clarification. And I'll check out with arpwatch.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
how do I find what MAC address web pages see as my MAC address rob.rice General 20 05-29-2010 03:08 AM
Finding out the original MAC address of an interfac zhjim Linux - Hardware 4 06-30-2009 12:33 PM
How to find an IP address from the MAC address of a remote machine ? jitz Linux - General 3 01-03-2006 08:55 AM
How to find IP address of a machine if I know their MAC Address dysenteryduke Linux - Networking 13 09-12-2005 11:21 AM


All times are GMT -5. The time now is 12:31 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration