wireless traffic

Steven M. Bellovin smb at research.att.com
Fri Nov 9 16:29:14 UTC 2001


In message <20011109104400.A6249 at noc.untraceable.net>, Andrew Brown writes:
>
>>> Does anybody know where I can locate a list of MAC address prefixes that
>>> belong specifically to wireless NIC cards?  I am looking for a method of
>>> discovering what devices on my network are wireless devices.
>>
>>Power down the wireless hub and see who calls? ;)
>>
>>Seriously though - your wireless hub/transmitter may have a queryable
>>arp table that will tell you what's not using the wire....
>
>i've used/seen cards with these prefixes:
>
> 00:e0:29 - smc
> 00:02:2d - orinoco/wavelan cards (lucent/agere)
>

I'm sending this via a Lucent card with prefix 0:60:1d.  A glance at my 
ARP table for a wireless-only segment shows 0:4:dd, 0:3:6b, 8:0:20, 
0:0:c, 0:c0:b7, 0:d0:b7, 8:0:6a, and more.

		--Steve Bellovin, http://www.research.att.com/~smb
		Full text of "Firewalls" book now at http://www.wilyhacker.com





More information about the NANOG mailing list