The document discusses MAC (Media Access Control) addresses, which are unique identifiers for network interfaces. It explains that MAC addresses are usually assigned by the manufacturer and stored in the network interface card. The standard format for MAC addresses is six groups of two hexadecimal digits separated by hyphens or colons. While intended to be permanent, it is possible to change or "spoof" the MAC address. MAC addresses are used to identify devices on a local network segment and can be queried using ARP or NDP protocols to map addresses between layers.

1. Fundamental
of
Hacking
A : Advanced
B: Be Smart and Safe
- Raval Sneh
- MCA 4
- Dept. Of Computer Science
1 21-03-2014

2. 21-03-2014
- Raval Sneh
2
Computer
IP
IPV4 IPV6
MAC

3.  A Media Access Control address (MAC address) is a unique
identifier assigned to network interfaces for communications on
the physical network segment.
 MAC addresses are used for numerous network technologies
and most IEEE 802 network technologies including Ethernet.
Logically, MAC addresses are used in the Media Access
Control protocol sub-layer of the OSI reference model.
 MAC addresses are most often assigned by the manufacturer of
a network interface card (NIC) and are stored in its hardware, the
card's read-only memory, or some other firmware mechanism.
 It may also be known as an Ethernet hardware
address(EHA), hardware address or physical address
- Raval Sneh
3 21-03-2014

4.  The standard (IEEE 802) format for printing MAC-48
addresses in human-friendly form is six groups of
two hexadecimal digits, separated by hyphens (-) or
colons (:), in transmission order, e.g. 01-23-45-67-89-
ab, 01:23:45:67:89:ab.
 This form is also commonly used for EUI-64.
 Another convention commonly used by networking
equipment uses three groups of four hexadecimal digits
separated by dots (.), e.g. 0123.4567.89ab; again in
transmission order.
21-03-2014
- Raval Sneh
4

5.  Although intended to be a permanent and globally unique
identification, it is possible to change the MAC address on
most of today's hardware, an action often referred to
as MAC spoofing.
 A host cannot determine from the MAC address of another
host whether that host is on the same link (network
segment) as the sending host, or on a network
segment bridged to that network segment.
 In TCP/IP networks, the MAC address of an interface can
be queried knowing the IP address using the Address
Resolution Protocol (ARP) for Internet Protocol Version 4
(IPv4) or the Neighbor Discovery Protocol (NDP) for IPv6.
- Raval Sneh
5 21-03-2014

6. 21-03-2014
- Raval Sneh
6

7. 21-03-2014
- Raval Sneh
7

8.  Setting first octet "02" actually sets the b2 bit
indicating that the MAC address is locally
administered. Looking at this MAC address
thus indicates that the MAC address is changed
by local machine administrator. But, its still
good if you just want to hide your original MAC
address instead of spoofing someone's MAC
address.
21-03-2014
- Raval Sneh
8

9. The following technologies use the MAC-48 identifier
format:
 Ethernet
 802.11 wireless networks
 Bluetooth
 IEEE 802.5 token ring
 most other IEEE 802 networks
 FDDI
 ATM (switched virtual connections only, as part of
an NSAP address)
 Fibre Channel and Serial Attached SCSI (as part of
a World Wide Name)
- Raval Sneh
9 21-03-2014

10.  http://www.technitium.com/
 www.wikipedia.com
21-03-2014
- Raval Sneh
10

11. 21-03-2014
- Raval Sneh
11