"From: Geoff Mulligan <Geoffrey .
Mulligan @
Eng .
Sun .
COM>
Date: Wed, 02 Feb 94 15:48:33 PST
Subject: Re: manufactures codes for ethernet
. . . .
"DECNET nodes change their ethernet address when DECNET comes up. The
trailing bits identify the decnet node."
Um, there is at least one PC Ethernet controller that allows the user
to reprogram the machine's Ethernet ID.
One presumes that one can reset the entire ethernet number, not just the
lower half. May as well have an eraseable manufacturer's name, part number,
and serial number, IMHO.
To summarize : if you have PCs on your ethernet, there exists a nontrivial
possibility of you being spoofed and having a hell of time finding the
system causing the problem ( short of a subnet-by-subnet search, thence
an office-by-office search, as surely many on this list have engaged in
over the years, a sort of Easter Egg Hunt for adults ... :-)
... and PC motherboards and ethernet controllers keep getting smaller. I'd
say one could attach such a device, inside a wall, to an ethernet, and it
would stand a good chance of never being found if it was programmed to do
its mischief intermittently. 'Specially if it used ethernet IDs and IPs of
well-known systems ... ( Scary thought. )
-- richard
Ra is the sun god ... He's such a *fun* god ...
Ra !! Ra !! Ra !!
richard childers san francisco, california pascal @
netcom .
com
|
|
