Hardware :: Finding Out The Original MAC Address Of An Interface?
Jun 29, 2009
How can i find out what mac address had been configured by factory default. I changed my mac address with
Code:
ip link set addrs 00:01:02:03:04:05
and now want to have the original one back. I'm having some trouble with a gigabit LAN PCI Express card. Namely the 89156 from delock. Output of dmesg
Code:
r8169 Gigabit Ethernet driver 2.3LK-NAPI loaded
[ 4.137225] r8169 0000:02:00.0: PCI INT A -> GSI 16 (level, low) -> IRQ 16
[ 4.137268] r8169 0000:02:00.0: setting latency timer to 64
[ 4.137346] r8169 0000:02:00.0: irq 27 for MSI/MSI-X
[code]....
So the card was recognized by the kernel. The driver was loaded and everything fine.... should be! But after assigning an ip addr and setting the nic up with
Code:
ip addr add 192.168.1.1/24 dev eth1
ip link set dev eth1 up
the kernel complained about something like that
Code:
?SISTEM? Can't assign address Also I could not find anything useful on the net finally the readme gave me some. So i changed the MAC address and everything was fine. The nic came up and got an ip through dhclient.i want to know why the old/original mac address didn't work. But even after reboot the new mac address remains. All I know the old one begun with 7b. how to get the original mac of a nic?
Im an academic (university networks and security lecturer) studying/teaching network and operating system security, and inspired by the work of Hovav Shacham set about testing ASLR on linux. Principley I did this by performing a brute force buffer overflow attack on Fedora 10 and Ubuntu 9. I did this by writting a little concurrent server daemon which accidently on purpose didnt do bounds checking.
I then wrote a client to send it a malicious string brute forcing guessed addresses which caused a return-to-libc to the function usleep with a parameter of 16m causing a delay of 16 seconds as laid out in [URL] Once I hit the delay I new I had found the function and could calculate delta_mmap allowing me to create a standard chained ret-to-libc attack. All of that works fine. However .... To complete my understanding I am trying establish where I can find the standard base address for ubuntu 9 (and other distros) for the following, taken from Shacham:-
Quote:
[code]....
/proc/uid/maps gives me some information but not the base address ldd also gives me the randomised starting address for sections in the user address space but neither gives me the base address. Intrestingly ... when a run ldd with aslr on for over (about) 100 times and checked the start point of libc I determined that the last 3 (least significant) hex digits were always 0's and the fist 4 (most significant) where between 0xB7D7 and 0xB7F9. To me this indicated that bits 22-31 were fixed and bits 12-21 were randomized with bits 11-0 fixed. Although even that doesnt define the boundaries observed correctly.
Note: I am replicating the attack to provide signatures to detect it using IDS, and for teaching purposes. I am NOT a hacker and if needed to could reply from my .ac.uk email address as verification.
I use chrony on my laptop thinking it would be better for it than ntp because I'm frequently connecting and disconnecting from wireless cafe access points and going in and out of suspend mode. But I've also noticed that if chrony is started before the access point is connected it never syncs to the time servers. I have to manually restart it via the service command after I connect. This doesn't seem right to me, if chrony fails to find a network at start time, doesn't it periodically try again ?
I'm looking for a way to get my IP address using the command prompt in Linux. I know when you type "ifconfig" you can get your local IP address (i.e. 192.168.0.103), but I'm looking for my IP address that I get from my ISP. How can I get this from Linux without having to visit some website?
My Ipod got stolen a few days ago and I am trying to figure out its mac address so that i can track it. I have sshed into it several times and i found some logs for some of the sessions but I cant find its mac address anywhere. I am wondering is there a way i can figure it out with my ssh logs or some of my other logs?
when i send any packet to anu destination and want to see he mac address of source and destination i am using the command tcpdump -qec1 but rather then getting the mac address of source and destination each time i am getting mac address of the system which is broadcasting. will anybody tell me how can i get source and destination mac address even if any other packet is also being broadcast to my network.
I have installed Kubuntu Lucid x86 10.4 LTS for the first time. Has anyone got a link that explains how KPackageKit gets the IP address of the repositories? I can install packages using sudo apt-get install xxx OK . KpackageKit tells me I have updates from the repositories. I can select them all and apply , but I get an error that it can't find the repository under a 192.168.100.129:8080 address . Which is not a surprise . I am using mirror.optus.net as a repository and can ping it fine on the command line. So is there somewhere else that KPackageKit maps IP addreses ? I have tried another mirror mirror.aarnet.edu.au and got similar results. My local sub-net is not 192.168.100 and have tried setting fixed IP on the local sub-net and different DHCP addresses and still the same error.
I am trying to find IP address. In a socket programming tutorial, I found :
Code: $ nslookup localhost command. It gives me a address. However, one colleague told me :
Code: $ ifconfig
It also returns me inet_addr. But both are different. Kindly tell me the correct method to find IP address? I have also checked the /etc/hosts file but it says "localhost"
I would like, from a C program, find the hardware MAC address of the default route path. With BASH I can do a 'route' find 'default and then an ifconfig and grep for 'HWaddr'. Are there C calls to do the same??
What is the Linux command to clear IP address of an interface without bringing it down and/or restarting network services. Seems strange ifconfig is able to change IP address but has no option to clear it, or am I wrong?
EDIT:As simple as ifconfig eth0 0.0.0.0. They should have put it in the man
I am using debain 6 and using a Sierra modem c888 to connect internet. I am using wvdial package for connecting the modem. I am able to connect internet. The question I have is, how do get the gateway address of the newly created ppp0 interface?
Im trying to achieve the multiple uplinks/provider found on LARTC.org. I have to get the IP addresses from my interfaces (EF1 and EF2) by using a script, but i dont know where to look at for the default gateway from each interface which got their ip address from my ISP.
When I do ifconfig than IPv6 address is appearing on an interface. However when I run the system-config-network and select to edit same interface than it shows the normal ip4 192.168.1.x address. Why is it like that? ipv4 at one place and ipv6 at other?
I recently just upgraded from humble Linux user to confused Linux admin of my own virtual Linux server. When I issue the ifconfig command I get following output.
Code:
venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:1.2.3.4 P-t-P:1.2.3.4 Bcast:1.2.3.4 Mask:255.255.255.255 UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
The WAN IP of the interface is not really 1.2.3.4 I just changed that IP for security reasons.What I am trying to figure out, is it possible to assign a private IP address to the same interface or can I only have one IP address per interface. I understand I have a mask of /32 so I am not going to be able to subnet the address to create any more addresses, so I assume I am stuck with the WAN IP (public IP) that I have, and just need to deal with it.
The reason I ask this is because I have been reading through several DNS/BIND tutorials/walk-throughs, and a lot of them specify setting up a intranet access with 192.168.1.1 address for the local DNS server, but since I am connecting to the sever via SSH I figure I do not need a private IP address.
i want to know mac address of a particular ip but the problem is that i am unable to ping that ip but that ip is being used by someone in my local network that i know from my proxy logs. i want to know the mac address of that ip,
Notice the 2 in address. Seems to me it doesn't like the network and wants it to be 172.16.0.0, but I am adding to a network already configured this way.
how to do a virtual interface under linux. I'm using for example eth0:1 so ifconfig eth0:1 192.168.0.20 netmask 255.255.255.0 for example.
However if i do eth0:1 hw ether 00:11:22:33:44:55 It changes eth0 as well. Where should i look into for creating a separate virtual interface that's simply bridged with one of the existing interfaces that has a separate ip and hw address that the os handles.
I've got a server that has bond0 and bond1 setup. I'm documenting some things in case I need to failover and bring up my secondary server up as primary... I just need to know if simply creating the interface ifcfg-bond0:0 with a new IP address obviously of the crashed system,,, is all that needs done or do I need to load bond0:0 module in /etc/modules.conf also?
Writing a program that finds the IP address of a host name. Sorry forgot to include the line numbers, but where the $$$ is where the syntax error is. The errors are syntax error before "{" token and syntax error before "if". I've looked throught the code for a couple hours and can't figure out what's causing it. The code is attached below.
Someone just erased my HWADDR line from /etc/sysconfig/network-scripts/ifcfg-eth0. How can I obtain my original MAC address?
Code:
ifconfig eth0 does not work (it shows the wrong MAC address) since the HWADDR line from the file I mentioned above was erased. Also there is no ifcfg-eth0.bak backup configuration file.
Just curious, because it seems my wireless connection works regardless of whether or not the MAC address is listed there. I'm just curious why that option is there to add it if it works regardless.
If i have a shell script to run on a Linux unit, which has a command to Reset(or say upgrade) the unit in between the script.Is it possible to find out the memory address of the next waiting command so that i can store the address to any environment variable in flash , then after Reset will continue Run from the stored address.
I want to configure multiple virtual ethernet interfaces over a single physical ethernet interface (eth0) and for each virtual interface the MAC address must be unique and the IP address must be Static.Finally all the virtual interfaces must be able to communicate both internally and externally and the traffic should be captured using wireshark.
I need to have such kind of setup to communicate devices individually using one physical ethernet device.
Because I was fiddling with few kernel modules like MACVLAN and MACVTAP and successfully enabled those modules and rebuild kernel. Using macvlan and macvtap I can configure virtual interfaces with unique mac address and static IPs but while capturing packets using wireshark interfaces behave weirdly.
For example say on HOST machine I have 1 physical interface and created 3 virtual interfaces as shown below.
First from above interfaces I started pinging eth0 internally from host machine in which it worked as usually.
Second I did same externally from other machine which is connected to the same network of Host machine, and this did work as usually.
Third I pinged first virtual interface veth0 both internally and externally and this also works and after that I did check source and destination MAC address using wireshark tool-where both showed up there respective MAC address.
Now triggers the issue, where I pinged second virtual interface same like I did for first one, but this time ping was success and where as in wireshark tool the MAC address for veth0 is picked by veth1. This is where I got stuck and this issue happened for all the remaining virtual interfaces.
I couldn't see any virtual interface showing their respective MAC address, as of the remaining except the first virtual interface has been picking the first veth0 mac address.
On startup of my pc (ubuntu 10.04 server x64), samba bind itself only to loopback network interface, as i can see when i do netstat -an , preventing me to enter in my shares from a remote pc.
Here is my configuration regarding samba network:
Code: interfaces = 127.0.0.0/8 192.168.1.0/24 bind interfaces only = yes and my /etc/network/interface Code: # The loopback network interface auto lo iface lo inet loopback code....
Any idea fo speed up my bridge configuration or to force samba to wait unitl the bridge is ready?
where are the interface configurations (set by ifconfig, not the static ones) stored? I'm asking because I'm trying to understand, more broadly, the order of IP address lookup. If I ping the local machine (localhost, or one of the interfaces) no messages get sent out (at least according to wireshark), so some local lookup must be taking place.
Is there an application that will take the data from an Open Office spread sheet and locate and mark each address on a map?I've got a long list that I need to sort and locate by zip codes.