Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
09-30-2004, 11:59 PM
|
#1
|
|
Member
Registered: Jul 2004
Location: USA
Distribution: Slackware, FreeBSD, LFS
Posts: 72
Rep:
|
MAC address iptables questions
While checking out my iptables generated logs, I noticed that the mac address of
most of the entries were the same. The MAC address shown is also much longer
than a traditional MAC address. It's also impossible that all these entries were
generated from the same piece of equipment, so I'm left wondering, how did I
get this address in my logs?
Is this some kind of default entry generated by iptables? Is it the address of my ISP gateway?
I guess I'm a little foggy on how MAC works inside a packet. Does an internet
transmitted packet retain it's source MAC through it's whole journey, or is this
something that changes hop to hop?
Thanks for any clarification, or links
|
|
|
|
10-01-2004, 11:34 AM
|
#2
|
|
Senior Member
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660
Rep:
|
MAC addresses are 6 octets, i.e. 48bits. They're displayed as 6 fields of 2 hex digits. These addresses are used by hardware devices to know where to send frames at the lowest network layer (link layer, AKA layer 2). Since MAC addrs are only used by hardware, the original host's MAC is not sent along the entire life of a datagram. Each hardware device that performs routing has it's own MAC, so firewalls, routers, intelligent bridges, etc all have MACs.
Quote:
|
Is it the address of my ISP gateway?
|
Close, it's the MAC of the internal interface of your broadband router.
|
|
|
|
10-01-2004, 01:26 PM
|
#3
|
|
Member
Registered: Jul 2004
Location: USA
Distribution: Slackware, FreeBSD, LFS
Posts: 72
Original Poster
Rep:
|
Thanks Chort
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 01:21 AM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|