Welcome to the most active Linux Forum on the web.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 06-05-2012, 06:09 AM   #1
LQ Newbie
Registered: Jun 2012
Location: The Netherlands
Distribution: Ubuntu 12:04 LTS
Posts: 4

Rep: Reputation: Disabled
Different MAC router when scanning with nmap

I'm doing some testing on my network and having the following outcome for
sudo nmap -sV -vv -PN

80/tcp open http Linksys WAG200GB WAP http config
443/tcp open tcpwrapped
1863/tcp open tcpwrapped
1864/tcp open tcpwrapped
4443/tcp open tcpwrapped
5190/tcp open tcpwrapped
5566/tcp open tcpwrapped
49152/tcp open http Intel UPnP reference SDK httpd 1.2 (UPnP 1.0, platform Linux 2.4.17_mvl21-malta-mips_fp_le)
MAC Address: xx:xx:xx:xx:80:32 (Cisco-Linksys)
Service Info: OS: Linux; Device: WAP

When I check the status in my Linksys router (thru web-interface), I see the following:

MAC Address: xx:xx:xx:xx:80:33 For gateway

Tought the mac was a "unique identifier" for the router.
Is it correct that th're two MAC's, One for local one for gateway? Or is it spoofed?

Thanks in advance!

Last edited by wez; 06-05-2012 at 09:21 AM.
Old 06-05-2012, 10:58 PM   #2
LQ Guru
Registered: Jan 2009
Location: Japan
Distribution: Mostly Debian and Scientific Linux
Posts: 5,753

Rep: Reputation: 1289Reputation: 1289Reputation: 1289Reputation: 1289Reputation: 1289Reputation: 1289Reputation: 1289Reputation: 1289Reputation: 1289

different network devices will have different mac addresses. Presumably you are looking at one of the internal interfaces when you run nmap, and are looking at the external interface when you use the web interface.

1 members found this post helpful.
Old 06-05-2012, 11:00 PM   #3
Senior Member
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora; Mint
Posts: 3,380

Rep: Reputation: 612Reputation: 612Reputation: 612Reputation: 612Reputation: 612Reputation: 612
Yes, there are two MACs. But one is only in reference to the unique MAC. You can usually change the nonunique one to anything you want.
1 members found this post helpful.
Old 06-06-2012, 03:28 PM   #4
LQ Newbie
Registered: Jun 2012
Location: The Netherlands
Distribution: Ubuntu 12:04 LTS
Posts: 4

Original Poster
Rep: Reputation: Disabled
Thanks, Seniors!!


Last edited by wez; 06-06-2012 at 03:31 PM.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] nmap scanning domain names smithy2010 Linux - Newbie 2 05-31-2012 12:09 PM
LXer: Scanning your LAN for conficker using nmap LXer Syndicated Linux News 0 07-01-2009 04:10 AM
OS detection and port scanning without nmap. User Name. Linux - Security 5 09-07-2006 09:42 AM
nmap scanning techniques metallica1973 Linux - Security 4 10-24-2005 11:16 PM
Nmap 3.93 scanning problems ? memo007 Linux - Software 1 09-21-2005 06:45 AM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 09:30 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration