MAC address randomization - LineageOS Questions & Answers

From an article on The Register today I wanted to ask if MAC address randomization is enabled in LOS and if there are any controls over is operation.
I can see there are some networking options in Developer options and Always allow Wi-Fi Roam Scans looks to be pertinent, but I'd be grateful of some clarification.
Thanks
Alan

mundayac said:
From an article on The Register today I wanted to ask if MAC address randomization is enabled in LOS and if there are any controls over is operation.
I can see there are some networking options in Developer options and Always allow Wi-Fi Roam Scans looks to be pertinent, but I'd be grateful of some clarification.
Thanks
Alan
Click to expand...
Click to collapse
I'm also interested about this question, did you find anything about this topic?
Or does anyone else maybe know if this is implemented and active by default?

Chainfire had an App about 3 years ago that did that. Don't know if it still works.
https://play.google.com/store/apps/details?id=eu.chainfire.pryfi

Related

Change IP settings Internet Sharing

Is there a way to change the IP range assinged by Internet Sharing in WM6?
over bluetooth or usb?
yes it's on registry... i can't check it now, but a simple search on the registry will reveal it fast.
an0key said:
Is there a way to change the IP range assinged by Internet Sharing in WM6?
Click to expand...
Click to collapse
Over bluetooth, have a look to [HKLM\Comm\BTPAN1\Parms\TcpIp] .
Cheers.
How to change MTU value for my Yoigo connection?
Hi pof
Do you know if any utility can manage MTU value?, I need to change this value because "Yoigo" uses an unusual lower value (472) and Live MSN, Hotmail, .. don't works in GPRS/3G connection.
I have been reading people who have edit registry and have solved this problem, if you can help me please let me know.
Thanks
tripledes said:
Over bluetooth, have a look to [HKLM\Comm\BTPAN1\Parms\TcpIp] .
Cheers.
Click to expand...
Click to collapse
I can't find a relative registry setting for usb connection. So it seems it's impossible to change the ip range for usb connection. Any suggestions?
pof said:
yes it's on registry... i can't check it now, but a simple search on the registry will reveal it fast.
Click to expand...
Click to collapse
It's for USB, did you manage to find it? cheers
an0key said:
Is there a way to change the IP range assinged by Internet Sharing in WM6?
Click to expand...
Click to collapse
I managed to change mine without going to the registry.
Go to
Settings -> Wifi -> Network Adapters -> Remote-NDIS Host
The default range is 192.168.0.0/24
I changed mine to 192.168.3.0/24 by keying IP address as 192.168.3.1 and 255.255.255.0 for netmask. the hermes will act as the DHCP server at address 192.168.3.1
Changing the IP range with RNDIS...
YOU ARE A GENIUS!!! I have managed to find so many things on my own, but this, my friend, is the one things that has been annoying the heck out of me, and you posted this so long ago, I hope you get a kudos for it. I got bluetooth to change ranges in the registry, but never would have thought this would work.
And the reason I needed it, I have been bouncing home to home, and no internet provider, so I need to use connection sharing to get to my router through a spare NIC on my PC so my VoIP phone would work. I was using the battery eating Bluetooth, but now, thanks to wonderful helpful, inquisitive people like you, I have the range I need, and it works flawless now, without killing the battery, and without the latency jitter I had before. THANK YOU!!!!!!!!!!!!!!!
-Rob
P.S. If you need ANY kind of other help with this phone (Mogul/PPC6800) let me know what you need, I probably know it all by now. YOU ROCK!
thanks for the pointers folks--worked after deleting forcecellconnection. haven't run into the " 'enable' gets set to 0 and kills connection" thing yet... maybe I haven't gotten greedy enough yet (connection time). Any further details on this, or on ATT going all draconian on our collective butts? this will be sweet on roadtrips.
That's a shame this does not exist anymore in windows mobile 6.5.
I have a HTC HD2 and I also want to change the IP range for RNDIS connection as I already use 192.168.0.0./24 at work.
Any idea how this could be done with wm6.5 ? Couldn't find anything in the registry.
Thanks in advance.
I finally found a registry entry that could do the thing :
[HKEY_LOCAL_MACHINE\Comm\RNDISFN1\Parms\Tcpip]
"IPAddress"="192.168.0.1"
"SubnetMask"="255.255.255.0"
"EnableDHCP"=dword:0
"DhcpMaxRetry"=dword:ffffffff
By default, the key "IPAddress" does not exist, that's why I couldn't find it by doing a 192.168 search in the registry ...
I will try to add this key and change its value to 192.168.5.1 for instance.
Hope this helps.

Internet Sharing over WiFi

Windows Mobile 6 devices offer Internet Sharing feature for Bluetooth and USB. It works in this way that you start Internet Sharing application inside of your Windows Mobile phone and then other devices can share the Internet connection. What if you could fool Windows Mobile phone and instead of Bluetooth use WiFi? Would it be possible? Yes, it is:
how to use Internet Sharing over WiFi, which essentially makes the Hermes an Access Point.
Do the following:
1) Open Settings->Internet Sharing. Enable IS for Bluetooth PAN.
2) Change HKLM\Comm\ConnectionSharing\PrivateInterface to "TIACXWLN1" (it should currently be "BTPAN1").
3) Open Settings-> Connections -> Wi-Fi. Select Network Adapters tab. Click IEEE 802.11b/g Compatible Wi-Fi.
4) Enter IP address 192.168.1.1 and subnet mask 255.255.255.0. Click OK.
5) Select Wireless tab. Add New.. to add the Network name for your ad-hoc network (I prefer "adhoc"
6) Set the client computer to use the same ad-hoc network. Client will receive an IP address from the device (don't need to manually set the IP).
I got this from a different website.
detailed information on this topic you can fined at
http://forum.xda-developers.com/showthread.php?t=332360
edward
Edward!! you rock! this has got to be the sweetest thing, since wm6..for me atleast, Im actually posting from my old hacked OSX x86, I really cant believe this worked, but it did.
Thanks a ton for sharing the info.
Edward, Can you plse explain why you set the wifi adaptor to a fixed IP?
The 192.168.1.1 is as far as I know only valid if the router has the 192.168.1 range. For me it should be 192.168.123. ...
Thx for an explanation.
a cab would be perfect!
Yes! A very nice feature; could this be put in as a cab?
Or better, in the comm manager.....
Anyone?
aeroke said:
Edward, Can you plse explain why you set the wifi adaptor to a fixed IP?
The 192.168.1.1 is as far as I know only valid if the router has the 192.168.1 range. For me it should be 192.168.123. ...
Thx for an explanation.
Click to expand...
Click to collapse
Your phone is now the router.
edward-riko
I tried the steps to the letter however, I am unable to connect. I tried on one device running Schaps 3.54c & the other vp3G. I get confused after I complete the step "select wireless tab then add new." The new wireless network shows unavailable on my device" I think I'm unsure how to configure the connection on the PC side. I'm unable to get the wireless configurator to allow me to input a specific IP address. I'm using Windows XP Pro. Any help would be greatly appreciated.
OK, I have been resisting, but why would you do this.
If you are using wifi to access the Internet, and the phone and PC both have wifi (in order to use wifi sharing), why not just access the wifi directly from the PC? Sorry to be thick, but I don't see why you would want this?
todd_jg said:
OK, I have been resisting, but why would you do this.
If you are using wifi to access the Internet, and the phone and PC both have wifi (in order to use wifi sharing), why not just access the wifi directly from the PC? Sorry to be thick, but I don't see why you would want this?
Click to expand...
Click to collapse
and if you don't have WiFi access to the Internet but only cellular access?
cp1md2b said:
edward-riko
I tried the steps to the letter however, I am unable to connect. I tried on one device running Schaps 3.54c & the other vp3G. I get confused after I complete the step "select wireless tab then add new." The new wireless network shows unavailable on my device" I think I'm unsure how to configure the connection on the PC side. I'm unable to get the wireless configurator to allow me to input a specific IP address. I'm using Windows XP Pro. Any help would be greatly appreciated.
Click to expand...
Click to collapse
play with this some more it will work in the end
do it systematically
edward
edward-riko said:
and if you don't have WiFi access to the Internet but only cellular access?
Click to expand...
Click to collapse
Hah! I knew I must have been missing something. Thanks.
WiFi & WM5?
Does this work on WM5? The instructions don't seem to match for me. Can someone tell me how to do this on WM5?
Nautme said:
Does this work on WM5? The instructions don't seem to match for me. Can someone tell me how to do this on WM5?
Click to expand...
Click to collapse
no it will not
THANK YOU
I have tried this out and it apprears to work pretty well- thank you so much, I had hoped this would be figured out. i had the idea to do this but not the technical know how.
This is awesome
but you know what would be also interesting?
to be able to share the wifi connection over Bluetooth or usb instead of the cellular.
Basically using the phone as a wifi adapter.
What say you?
titan 6800
Has any one gotten this to work with the 6800? The registry key for bluetooth is different.
Thanks
Garvin.
edward-riko said:
Do the following:
1) Open Settings->Internet Sharing. Enable IS for Bluetooth PAN.
2) Change HKLM\Comm\ConnectionSharing\PrivateInterface to "TIACXWLN1" (it should currently be "BTPAN1").
3) Open Settings-> Connections -> Wi-Fi. Select Network Adapters tab. Click IEEE 802.11b/g Compatible Wi-Fi.
4) Enter IP address 192.168.1.1 and subnet mask 255.255.255.0. Click OK.
5) Select Wireless tab. Add New.. to add the Network name for your ad-hoc network (I prefer "adhoc"
6) Set the client computer to use the same ad-hoc network. Client will receive an IP address from the device (don't need to manually set the IP).
I got this from a different website.
Click to expand...
Click to collapse
Actually, it came from this site - we've been discussing it for days in the Development and Hacking forum! It was in this post by Fluxist who'd discovered it in the first place, and the other sites have been following suit... we're working on a more elegant way to do it now. And you directly quoted his post!
I'm going to be trying to write a full-on NAT router for it I think, although we're seeing if we can do a basic version for now.
man, i cannot belive this..
that is amazing
N2A said:
Actually, it came from this site - we've been discussing it for days in the Development and Hacking forum! It was in this post by Fluxist who'd discovered it in the first place, and the other sites have been following suit... we're working on a more elegant way to do it now. And you directly quoted his post!
I'm going to be trying to write a full-on NAT router for it I think, although we're seeing if we can do a basic version for now.
Click to expand...
Click to collapse
i took it from PPCGeeks forum
http://forum.ppcgeeks.com/showthread.php?t=9340
sorry if i a fended you in any way and good luck with your work
edward
killershot20 said:
This is awesome
but you know what would be also interesting?
to be able to share the wifi connection over Bluetooth or usb instead of the cellular.
Basically using the phone as a wifi adapter.
What say you?
Click to expand...
Click to collapse
I was thinking the same thing. I frequently stay in foreign hotels in which are "unwired." I'd love to use my phone as the registered device when buying wifi so that I could make VOIP calls and check my e-mails on ground and tether it to my notebook back in the roam. In Dubai, you can get hooked for $30 a day for wifi.
edward-riko said:
i took it from PPCGeeks forum
http://forum.ppcgeeks.com/showthread.php?t=9340
sorry if i a fended you in any way and good luck with your work
edward
Click to expand...
Click to collapse
Heh, it's cool dude - PPCGeeks got it from us - but check your research ;-) No point having duplicate threads.

MAC Address Changing with every Reset?

Just updated my HD7 to the update with internet sharing. After this, I can confirm that every time I reboot my phone, I get a new mac address. Which prevents me from connecting to my MAC-address-filtered wifi. I've done it 6 times and gotten 6 unique MAC addresses.
Does this happen to anyone else's phone? HD7 specific? or all phones with internet sharing? My internet sharing is turned off.
That's strange, I've never heard of a device with a dynamic MAC address before. Does your phone have one printed under the battery?
Nope, just IMEI, SN and PN. No MAC address.
This must be related in internet sharing somehow.
silvertonesx24 said:
Does this happen to anyone else's phone? HD7 specific? or all phones with internet sharing? My internet sharing is turned off.
Click to expand...
Click to collapse
I can confirm this on my HD7.
MAC changes on every reboot.
I confirm too,i have the issue of mac adress changing every reboot
& my wifi is not visible since the update,My wifi is N and i can only see wifi G near me but not mine
hi
for me too : mac adress change after shutdown.
for time don't shutdown the phone to have same mac adress with my internet box.
htc support tell me that they will answer on monday.
but i think it's a big problem with this update...
Ben
That's a bit strange. Normally you can't change MAC's for yourself, only spoofing is possible. If WP is really changing the MAC adress with every reboot, WP needs a valid MAC adress block licensed from IEEE, otherwise it would be a violation against IEEE.
I thought mac address we're never aloud to change!?
Lol that's illegal as all hell, a dynamic mac address
Gotta be a glitch in the firmware surely? No way that's allowed. Your definitely sure it's not a dynamic IP address you're seeing?
Sent from my SGH-i917 using Board Express
ive also asked this question a couple of days ago right after applying the htc internet sharing update. and ive posted my question here (entry #38) and people provided good answers about it. hope this helps
Yes, mine also changes it's only when i read this thread and test my hd7 and i notice the changes.But I S is a breeze.
The issue is that some people assign static IPs to devices on their home networks, and this is done in most routers via MAC address coupling (MAC a always gets IP z and so forth). That way you can simply block all devices you and people in the residence do not own. I do it on all my machines for development reasons, cause I like knowing I can always use x IP address to get at a certain machine even if I turn it off or it's down for a while for repairs. The IP never changes as long as I continue to use that specific network card in the computer.
I don't know why they would do that. Perhaps for security reasons?
I have the same problem - cannot connect to my University WiFi network as the MAC address keeps on changing....
This is crazy!
They better get on that quick! They could get in a lot of **** for that
putting aside the weird WP7 behaviour for the moment...
MAC filtering is useless as a security measure. It's trivially spoofable by anyone who actually wants to attack your network, and causes a pain in the arse for yourself. do yourself a favour and disable it already. the only thing it might be good for is router-side internet access control of your technically challenged 8 year old who doesn't know how to use google.
just use a strong password i.e. 20+ characters alpha (upper & lower) + numeric + special characters, and proper wireless security (WPA-2 AES, or at least WPA AES) and you'll be just fine.
Confirming
That update was a bag full of $$$$ !Luckly I was able to restore through Zune,but my Bootloader (SPL) was also updated to 5.01 and no way of going back!
With regards to the missing WiFi network - make sure it's not using Channel 13. The new update seems to disable the use of Channel 13 for some reason.
There is also another issue with the changing MAC's - I believe that some "public" WiFi networks such as the cloud use the MAC to remember your device and allow it to connect...
primexx said:
putting aside the weird WP7 behaviour for the moment...
MAC filtering is useless as a security measure. It's trivially spoofable by anyone who actually wants to attack your network, and causes a pain in the arse for yourself. do yourself a favour and disable it already. the only thing it might be good for is router-side internet access control of your technically challenged 8 year old who doesn't know how to use google.
just use a strong password i.e. 20+ characters alpha (upper & lower) + numeric + special characters, and proper wireless security (WPA-2 AES, or at least WPA AES) and you'll be just fine.
Click to expand...
Click to collapse
Mac filtering is not useless as a security measure. It's not used by itself. It's used in conjunction with other methods, the same way businesses also hide their wireless network's SSID.
I'm not filtering on an Open Connection. That would be retarded.
Seriously...
GrahamWager said:
With regards to the missing WiFi network - make sure it's not using Channel 13. The new update seems to disable the use of Channel 13 for some reason.
There is also another issue with the changing MAC's - I believe that some "public" WiFi networks such as the cloud use the MAC to remember your device and allow it to connect...
Click to expand...
Click to collapse
im not sure though but im guessing so does other apps with secured log in parameters. i do have the bank of america app. right after i did the update, and after inluding the new mac to my networks allowed list of mac addresses, the boa app again posted a message saying that the device where im accessing boa has not been used previously to access the account. so im guessing that it saves all the mac addresses of devices that accessed a boa account.

Help... Wifi Mac Address Changes On Every Reboot

Hey fellow GN users!
I seem to be having a problem with my wifi mac address changing every time I reboot... I was wondering if this is a hardware or a software problem? I have mac address filtering set on my router so it would be convenient if the mac address didn't change... I'm still on my first week with the phone and I want to make sure everything works before my 14 day period is over. Is anyone else having this problem? Anyone know a fix if they are having the problem? Any help would be most appreciated! Thanks!
Galaxy Nexus (LTE)
Unlocked, Rooted
Flashed with Android Revolution HD 2.1.2
Welcome to the club!
http://code.google.com/p/android/issues/detail?id=23330
From my support call to Samsung, this is apparently a software issue, but I'm not sure I believe that 100%. For me, I switched my home wifi around to use WPA-2 with a ridiculously long password and no MAC filter to make me no longer care, but that's just me I'm secretly hoping to be the guy that can tell Google "hey - you fixed it!!", probably why I don't push harder to exchange my phone.
Please add a comment/star to my Google Code issue if you don't mind; the more people that chime in the better off we will be. I truly believe that a lot of GNs have this problem since it's not something that most people would notice.
If getting rid of your MAC filter is impossible, you should really consider exchanging your device, I imagine it will be quite a while (if ever) for this to get fixed. Call me a pessimist if you must.
Odd, isn't a MAC address suppose to be hard flashed to the radio?
Mine started changing the Mac address today after rooting. The last month with it running stock, no issue. Hmmm, used the Galaxy Nexus tool kit for rooting.
MAC address filtering is not really a good security measure. It is very easy for someone to see the MAC addresses connected to a particular WAP and clone one of them.
You are much more secure using WPA2 with a decently long password.
I just started experiencing the problem yesterday. My phone DID have a 2c:44 address and I switched roms pretty frequently. I flashed an update to the Codename rom that I had been using for a while, and I wasn't able to connect to my router. Knowing what I thought I knew about MAC addresses I didnt think about it, i rebooted all sortsa crap, then thought what the hell check the mac filter list, and sure enough mine had changed, and now i'm sporting one of the dreaded 00:90:4c addresses and the last few characters change every reboot... I am not a happy camper.
I understand how it isn't an amazing security option, but in a small apartment building in the sticks in PA I know my neighbors have no idea how to get around it. WPA2 uses up too much bandwidth overhead for streaming 1080p over wifi. That's why I dont use it and use MAC filtering.
acroanidd said:
I understand how it isn't an amazing security option, but in a small apartment building in the sticks in PA I know my neighbors have no idea how to get around it. WPA2 uses up too much bandwidth overhead for streaming 1080p over wifi. That's why I dont use it and use MAC filtering.
Click to expand...
Click to collapse
It is not a bandwidth overhead but a resource hog. But I get your jist. I save all my HD streaming for wired.
Have you done an EFS partition backup?
Sent from my Galaxy Nexus using XDA App
I didnt know what and EFS partition was until I just googled it and I've been rooting / rom'ing phones and devices (5 different phones and 2 tablets) for the last 2 years and never once heard of it.. that being said i did a nandroid backup and restoring it did not help
I'm going to try Odin flashing back, I read somewhere it fixes IMEI / EFS corruption, heres hoping it works for wlan mac addresses. Only place I found an Odin image of it was from megaupload so it will take a long time to get it...
Edit: if you clicked on the link for the firmware i posted, do NOT click it, i think that was GSM
Well that was a bust, odining back didn't help... I dont want to risk swapping the phone out considering i put one of those zagg screen protectors on it for a phone that is going to have the same problem... I am concerned because of the fact that i did have a valid sticking mac address, and all of a sudden it just stopped which leads me to believe it is totally software related.
frogskins said:
MAC address filtering is not really a good security measure. It is very easy for someone to see the MAC addresses connected to a particular WAP and clone one of them.
You are much more secure using WPA2 with a decently long password.
Click to expand...
Click to collapse
Was just about to say it. +1000. There is nothing about MAC address filtering that is secure. Anyone can spoof the MAC address, and its easy to intercept them when in range.
Use a normal security protocol and you'll be better off all around. MAC filtering is just a hassle anyways.
martonikaj said:
Was just about to say it. +1000. There is nothing about MAC address filtering that is secure. Anyone can spoof the MAC address, and its easy to intercept them when in range.
Use a normal security protocol and you'll be better off all around. MAC filtering is just a hassle anyways.
Click to expand...
Click to collapse
Thank you for your concerns however as I said before I dont need crazy security, I just had to deal with rednecks connecting to my router using torrents a couple times. Since that has happened and i enabled mac filtering I haven't had any problems (i would know because my internet bandwidth would go to crap)
Actually setting up WPA2 is more of a hassle than logging into a router, clicking on one link and typing in the mac address rather than somehow finding a way to configure my network to handle the bandwidth with WPA2, which I have tried, but even with a dual band n wireless ethernet bridge with gigabit out to a gigabit switch doesnt do the trick, disable wpa2 all of a sudden all my video stuttering woes go away.
That is at a personal level, at work I have MAC filtering not to connect as a security measure but my ip address is assigned based on it, and well it's much more complicated than at home... please if you are going to post something in this thread try to be helpful.
acroanidd said:
Actually setting up WPA2 is more of a hassle than logging into a router, clicking on one link and typing in the mac address rather than somehow finding a way to configure my network to handle the bandwidth with WPA2, which I have tried, but even with a dual band n wireless ethernet bridge with gigabit out to a gigabit switch doesnt do the trick, disable wpa2 all of a sudden all my video stuttering woes go away.
That is at a personal level, at work I have MAC filtering not to connect as a security measure but my ip address is assigned based on it, and well it's much more complicated than at home... please if you are going to post something in this thread try to be helpful.
Click to expand...
Click to collapse
Again, it has nothing to do with bandwidth. It has everything to do with the devices ability to encrypt and decrypt packets at full speeds, which obviously your device cannot do. You might want to step up to something a little more powerful.
I can do 1080p streaming on a G network with WPA2 enabled. The difference between my setup and yours? I am using an enterprise grade WAP (Cisco 1242). It has no problems whatsoever doing the encryption and decryption at the full wireless speed.
And I think you mentioned you were located in Central PA, and all you had to protect from was hicks. Well, I am one of those hicks (Live in Central PA as well) and I LOVE cracking in to WAPs
I am having this issue now. any solutions?
acroanidd said:
Thank you for your concerns however as I said before I dont need crazy security, I just had to deal with rednecks connecting to my router using torrents a couple times. Since that has happened and i enabled mac filtering I haven't had any problems (i would know because my internet bandwidth would go to crap)
Actually setting up WPA2 is more of a hassle than logging into a router, clicking on one link and typing in the mac address rather than somehow finding a way to configure my network to handle the bandwidth with WPA2, which I have tried, but even with a dual band n wireless ethernet bridge with gigabit out to a gigabit switch doesnt do the trick, disable wpa2 all of a sudden all my video stuttering woes go away.
That is at a personal level, at work I have MAC filtering not to connect as a security measure but my ip address is assigned based on it, and well it's much more complicated than at home... please if you are going to post something in this thread try to be helpful.
Click to expand...
Click to collapse
WPA2 isn't crazy security. I wouldn't recommend anybody running anything less than WPA2 with 256 bit AES encryption. If you can't run that I recommend upgrading your hardware.
so... i just started having this issue after my battery died last night now today I have a different MAC..
This has to be fixed at kernel level or maybe a script to set the mac at bootup time can be used. really annoying and stupid

MAC Address

Greetings...I'm trying to determine the MAC address of my HTC TP2's 3G radio. I am setting up a firewall rule to only alow a specific MAC address to pass for specific services. Any ideas as to how to determine the MAC address of the internal radio?
Thanks,
Chris
chrisb009 said:
Greetings...I'm trying to determine the MAC address of my HTC TP2's 3G radio. I am setting up a firewall rule to only alow a specific MAC address to pass for specific services. Any ideas as to how to determine the MAC address of the internal radio?
Thanks,
Chris
Click to expand...
Click to collapse
MAC of the 3g radio...? Certainly you mean the wlan radio.
When I enable wifi in WinMo, there's an "advanced" button at the bottom. Then choose wi-fi info, IP and MAC.
Response....
Not the WiFi radio...the 3g radio as I need access outside my network through a UTM. I guess the first question should have been, is there a MAC associated with the 3g radio?
Thanks,
Chris
chrisb009 said:
Not the WiFi radio...the 3g radio as I need access outside my network through a UTM. I guess the first question should have been, is there a MAC associated with the 3g radio?
Thanks,
Chris
Click to expand...
Click to collapse
Odd.
I'd guess there is, but I've never heard of anyone caring about it lol. IP probably wouldn't work so well either, what about hostname or smth else?
What if you lose your phone?
I'll see what I can dig up.
Edit - wait... if your packets are going thru a layer-3 router (which undoubtedly they are at some point) the MAC will be lost. So this won't work at all, even if you did find the MAC of your phone.
Response...
I couldn't find anything through searches....The IP would be of a dynamic nature so I couldn't use it however the thought about a host name is an idea. I'll have to inspect the packets to determine if a host name is present. On my inital inspection I captured a MAC however that MAC seems to be dynamic and did change a few times using one of two MAC'S thoughout the capture. Also...during the capture I captured IPv6 MAC's....not IPv4. I'm just wondering if the CDMA network assigns a dynamic MAC instead of using a hardware based MAC? I would find this highly unlikely however it could be a possibility.
Thanks,
Chris
chrisb009 said:
I couldn't find anything through searches....The IP would be of a dynamic nature so I couldn't use it however the thought about a host name is an idea. I'll have to inspect the packets to determine if a host name is present. On my inital inspection I captured a MAC however that MAC seems to be dynamic and did change a few times using one of two MAC'S thoughout the capture. Also...during the capture I captured IPv6 MAC's....not IPv4. I'm just wondering if the CDMA network assigns a dynamic MAC instead of using a hardware based MAC? I would find this highly unlikely however it could be a possibility.
Thanks,
Chris
Click to expand...
Click to collapse
Please read my edit about layer-3 routers. I'm having this same problem at work, in relation to sniffing VoIP RTP streams passively. When crossing a layer-3 router/switch, the MAC is lost in transit.
Response...
I believe I finally nailed down the actual MAC address. My packet monitor was set for the monitoring a different port on the switch.....should have been set for X1 instead of X0. I'll make the changes to the firewall and all should be good. This exercise is for a handheld utilizing a SIP client tied into my VoIP server....I only allow specific SIP clients to access my VoIP server....helps prevent hacking and unauthorized phone use.
Thanks,
Chris
Response...
I'll report back my findings after I make the configuration changes.....I am assuming this will work as I already have this in place for all SIP providers currently in use.
Thanks,
Chris
Findings....
Ok...one small detail I forgot.....is that MAC addresses change with each hop. With that being said.....the only way to "filter" incoming packets is to filter by IP address. I currently filter all SIP related protocols by carrier/provider IP address. Now this creates an issue due to the fact handhelds outside of the network will have dynamic IP's assigned by the cellular carrier. I'll have to continue to research this....I believe the only work around might be a VPN tunnel originating from the handheld into the network.
Thanks,
Chris
chrisb009 said:
Ok...one small detail I forgot.....is that MAC addresses change with each hop. With that being said.....the only way to "filter" incoming packets is to filter by IP address. I currently filter all SIP related protocols by carrier/provider IP address. Now this creates an issue due to the fact handhelds outside of the network will have dynamic IP's assigned by the cellular carrier. I'll have to continue to research this....I believe the only work around might be a VPN tunnel originating from the handheld into the network.
Thanks,
Chris
Click to expand...
Click to collapse
That's what I told you, twice now...
Actually..
You mentioned loosing the MAC address across a layer 3 router....the MAC address is lost across any router regardless of it's layer capability thus I will implement a different solution.
Chris
chrisb009 said:
You mentioned loosing the MAC address across a layer 3 router....the MAC address is lost across any router regardless of it's layer capability thus I will implement a different solution.
Chris
Click to expand...
Click to collapse
What router operates only at the layer-2 level? lol.

Categories

Resources