在内网上发现可疑终端，MAC竟然是：00:00:00:00:00:18

ehu4ever

这个MAC地址是不是很古老的那种啊？

nmap测试如下：

$nmap-5.21>ping 22.213.80.50

Pinging 22.213.80.50 with 32 bytes of data:

Control-C
^C
$nmap-5.21>nmap -sP 22.213.80.50

Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-11 10:11 中国标准时间
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-
servers
Nmap scan report for 22.213.80.50
Host is up (0.00s latency).
MAC Address: 00:00:00:00:00:18 (Xerox)
Nmap done: 1 IP address (1 host up) scanned in 0.19 seconds

$nmap-5.21>nmap -sP 22.213.80.93

Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-11 10:11 中国标准时间
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-
servers
Note: Host seems down. If it is really up, but blocking our ping probes, try -PN
Nmap done: 1 IP address (0 hosts up) scanned in 0.41 seconds

$nmap-5.21>ping 22.213.80.50

Pinging 22.213.80.50 with 32 bytes of data:

Control-C
^C


$nmap-5.21>nmap -A -T4 22.213.80.50

Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-11 10:33 中国标准时间
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-
servers
Nmap scan report for 22.213.80.50
Host is up (0.038s latency).
All 1000 scanned ports on 22.213.80.50 are filtered
MAC Address: 00:00:00:00:00:18 (Xerox)
Too many fingerprints match this host to give specific OS details
Network Distance: 1 hop

HOP RTT      ADDRESS
1   37.98 ms 22.213.80.50

OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 58.30 seconds

$nmap-5.21>nmap -sS -O 22.213.80.50

Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-11 10:34 中国标准时间
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-
servers
Nmap scan report for 22.213.80.50
Host is up (0.046s latency).
All 1000 scanned ports on 22.213.80.50 are filtered
MAC Address: 00:00:00:00:00:18 (Xerox)
Too many fingerprints match this host to give specific OS details
Network Distance: 1 hop

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 54.81 seconds

望花煮

没见过，观望。

zoleo

有些网卡的MAC是可以设置的

flb_2001

哪些网卡不可以设置呢

旷世奇人

一般的网卡的MAC地址都是厂家设置好的，不可修改的。。。。相当于身份证一样

rd360

回复 1# ehu4ever


    还没有见到过不能设置的。

为什么删我号

没见过，观望

shchao84914

Xerox products.{:3_183:}

sanitizer84

mac可以改很简单的