LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-05-2012, 12:26 PM   #1
wez
LQ Newbie
 
Registered: Jun 2012
Location: The Netherlands
Distribution: Ubuntu 12:04 LTS
Posts: 4

Rep: Reputation: Disabled
Different MAC router when scanning with nmap


Hi,
I'm doing some testing on my network and having the following outcome for
sudo nmap -sV -vv -PN 192.168.1.1:

PORT STATE SERVICE VERSION
80/tcp open http Linksys WAG200GB WAP http config
443/tcp open tcpwrapped
1863/tcp open tcpwrapped
1864/tcp open tcpwrapped
4443/tcp open tcpwrapped
5190/tcp open tcpwrapped
5566/tcp open tcpwrapped
49152/tcp open http Intel UPnP reference SDK httpd 1.2 (UPnP 1.0, platform Linux 2.4.17_mvl21-malta-mips_fp_le)
MAC Address: xx:xx:xx:xx:80:32 (Cisco-Linksys)
Service Info: OS: Linux; Device: WAP


When I check the status in my Linksys router (thru web-interface), I see the following:

MAC Address: xx:xx:xx:xx:80:33 (For gateway!)

Thought the mac was a "unique identifier" for the router.
Is it correct that th're two MAC's, One for local one for gateway? Or is it spoofed?

Thanks in advance!

Router: Wireless-G ADSL Home Gateway WAG200G
Lap-Jap: ASUS K something. UBUNTU 12:04 LTS

Last edited by wez; 06-05-2012 at 01:17 PM.
 
Old 06-05-2012, 12:33 PM   #2
baldy3105
Member
 
Registered: Jan 2003
Location: Cambridgeshire, UK
Distribution: Mint (Desktop), Debian (Server)
Posts: 891

Rep: Reputation: 184Reputation: 184
One MAC on wifi and one on the physical eth? Would seem logical as they're sequential.
 
Old 06-05-2012, 01:21 PM   #3
wez
LQ Newbie
 
Registered: Jun 2012
Location: The Netherlands
Distribution: Ubuntu 12:04 LTS
Posts: 4

Original Poster
Rep: Reputation: Disabled
The first scan was over eth.

Scanned the local net over wi-fi and had the same result: MAC Address: xx:xx:xx:xx:80:32 (Cisco-Linksys)
Checked the the router physical as well and there is only one MAC written on there, the one that ends on 32...

Last edited by wez; 06-05-2012 at 01:37 PM.
 
Old 06-06-2012, 12:37 PM   #4
Reuti
Senior Member
 
Registered: Dec 2004
Location: Marburg, Germany
Distribution: openSUSE 15.2
Posts: 1,339

Rep: Reputation: 260Reputation: 260Reputation: 260
The other is for the port to the outside world.
 
Old 06-09-2012, 06:50 PM   #5
Linux_Kidd
Member
 
Registered: Jan 2006
Location: USA
Posts: 737

Rep: Reputation: 78
Quote:
Originally Posted by wez View Post


When I check the status in my Linksys router (thru web-interface), I see the following:

MAC Address: xx:xx:xx:xx:80:33 (For gateway!)
well, pls clarify what "For gateway" means?
basic routers typically have two iface's, each with their own MAC. a wifi cable modem might have three, one WAN, one LAN-wired, and one LAN-WiFi. some Wifi is layer-2 to the LAN-wired switch, etc.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Different MAC router when scanning with nmap wez Linux - Newbie 3 06-06-2012 02:28 PM
[SOLVED] nmap scanning domain names smithy2010 Linux - Newbie 2 05-31-2012 11:09 AM
OS detection and port scanning without nmap. User Name. Linux - Security 5 09-07-2006 08:42 AM
nmap scanning techniques metallica1973 Linux - Security 4 10-24-2005 10:16 PM
Nmap 3.93 scanning problems ? memo007 Linux - Software 1 09-21-2005 05:45 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:37 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration