This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Lan Mac Address from outside network

0

HI,

To start with, lets say I'm a novice, Im a coder but not a hacker, I have read a few articles that mentioned wreshark but cannot find an answer to the following :

Can Wireshark sniff out a Lan mac address from outside that network ? Thanks, Mark

asked 05 Mar '15, 10:12

22oakdene's gravatar image

22oakdene
6112
accept rate: 0%


One Answer:

0

Short answer: no (almost). A little more background: when you say "outside the network" I interpret that as "behind a router". This router limits where Ethernet frames can go, hence behind a router the node's MAC address is no longer visible.

But I also say 'almost'. Sometimes a MAC address comes up in an higher layer protocol, for instance if the router also functions as DHCP relay. Or if you use certain types of IPv6 addresses.

Have a look at the online TCPIP guide if you would like to know more.

answered 05 Mar '15, 10:57

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Hi Jaap, Thanks for the response, allow me to add more info. I have recently read an article online that there is a keygen for "Sky" routers [Incase you are outwith the UK, Sky is one of if not, the largest ISP providers here] Meaning the keygen requires the SSID and MAC address and this uses the same algorithm that Sky used to create the password - meaning if someone can sniff your MAC address, they can generate the password that it was shipped with !!

Of course, I can change the Password, SSID and hide the network but I'm curious if this is actually possible ?, i.e. is this a real threat ??

So, How does someone sniff a MAC address if they are not in the network. Follow ?

(06 Mar '15, 08:41) 22oakdene