LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Reply
 
Search this Thread
Old 03-13-2007, 08:12 AM   #1
srikrishna097
LQ Newbie
 
Registered: Dec 2006
Posts: 3

Rep: Reputation: 0
Hardware address misuse


Im in a university where in , we are required to register our hardware addresses for our internet connection , however someone seems to be misusing the system by using the address to which ive been registered to. He comes online for only for a limited period of time in the day and i need to sniff the person out ,How do i do it??
 
Old 03-13-2007, 08:17 AM   #2
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 52
Quote:
Originally Posted by srikrishna097
Im in a university where in , we are required to register our hardware addresses for our internet connection
Call them and explain them the problem because there is no easy solution.
Quote:
, however someone seems to be misusing the system by using the address to which ive been registered to. He comes online for only for a limited period of time in the day and i need to sniff the person out ,How do i do it??
Try arpwatch
If he does a mistake, you will get his real mac adress
I have no other legal idea
 
Old 03-13-2007, 03:50 PM   #3
GrapefruiTgirl
Guru
 
Registered: Dec 2006
Location: underground
Distribution: Slackware64
Posts: 7,594

Rep: Reputation: 550Reputation: 550Reputation: 550Reputation: 550Reputation: 550Reputation: 550
Hmm.. Interestng.
I wonder, if you could supply them with your hardware address (MAC address) you'll probably need to work with the system admins of your university and suggest to them to peruse/monitor the server logs looking for your address and where it is connecting from (should be very easy for them to insert a rule into their firewall to react to any specific address), and meanwhile check into overriding your actual hardware address with a software one until the culprit is located, at which point you can switch back to your default HWaddress.
I am not certain, I think as far as overriding your HWaddress you need to use IPtables or something to do with Inetd.. Sorry I can't remember where I just recently came across it on my system, but I'll have a peek around and if you like, post the info.
Best of luck! Darned address thieves Grr :P
 
Old 03-13-2007, 03:59 PM   #4
GrapefruiTgirl
Guru
 
Registered: Dec 2006
Location: underground
Distribution: Slackware64
Posts: 7,594

Rep: Reputation: 550Reputation: 550Reputation: 550Reputation: 550Reputation: 550Reputation: 550
Quote:
#HWADDR[4]="00:01:23:45:67:89" # Overrule the card's hardware MAC address
Ahhh, here it is, from etc/rc.inet1.conf

Not sure what the [4] is for (no pun intended, lol), but there is one on every line of my file.
If stealing an address is (and it likely is) against university policy you could change yours and leave the culprit-finding up to the sysadmins.. just remember to register your new address with the system.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Considering the Misuse of Open Source LXer Syndicated Linux News 0 12-13-2005 01:01 PM
DHCPd based on Hardware Address Wildcard. Big_tummy Linux - Networking 1 05-23-2005 11:44 AM
NIC hardware address bobwall Linux - Networking 6 09-01-2004 04:39 PM
how to modify wireless hardware address Abrocadabro Linux - Hardware 1 08-09-2004 02:37 AM
eth0 recognized but no hardware address rickenbacherus Linux - Hardware 5 05-12-2003 09:00 AM


All times are GMT -5. The time now is 09:26 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration