[Scottish] What's up MAC?

[Ian Drake, IT, CIR, SE Dunbartonshire]

This might be a wild shot, and I may e talking mince (I do, often) but it's
my understanding that the MAC address is read from the ROM on the card at
driver start-up, this is then held in memory by the OS and it's this memory
that is used as the actual MAC address. Theoretically changing this in
memory after the card had booted should allow you to spoof a MAC addy.

If I recall the location on win95 is something like -
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Class\Net\000<x>\Networ
kAddress

And under Linux this can be done with the good old ifconfig program

ifconfig ethX hw 00DEADBEEF00

and again, in theory this should work with any card (yeap, even the ones you
already got).

The cards that advertise as having changeable MAC addresses have software
available that will allow you to change the ROM on the NIC to a new address,
this has the advantage of allowing the change to survive a reboot.

HTH,

Ian

I theory there is no difference between theory and practise, in practise
there is.

-----Original Message-----
From: Colin McKinnon [mailto:colin@wew.co.uk]
Sent: 10 March 2003 09:53
To: scotlug
Subject: [Scottish] What's up MAC?


Anybody know which NICs have programmable MAC addresses? Preferably 
configurable  under Windows as well as Linux. Extra browny points will 
be awarded for cheapness ;)

Colin


_______________________________________________
Scottish mailing list
Scottish@mailman.lug.org.uk
http://mailman.lug.org.uk/mailman/listinfo/scottish

________________________________________________________________________
Scottish Enterprise Network
http://www.scottish-enterprise.com

Headquarters Address & Contact Numbers

150 Broomielaw
5 Atlantic Quay
Glasgow
G2 8LU.
Tel:  +44 (0) 141 248 2700.
Fax:  +44 (0)141 221 3217

 This message is sent in confidence for the addressee only.
It may contain legally privileged information. The contents are not to
be disclosed to anyone other than the addressee. Unauthorised recipients
are requested to preserve this confidentiality and to advise the sender
immediately of any error in transmission.