在内网上发现可疑终端，MAC竟然是：00:00:00:00:00:18

ehu4ever

这个MAC地址是不是很古老的那种啊？\r\n\r\nnmap测试如下：\r\n\r\n$nmap-5.21>ping 22.213.80.50\r\n\r\nPinging 22.213.80.50 with 32 bytes of data:\r\n\r\nControl-C\r\n^C\r\n$nmap-5.21>nmap -sP 22.213.80.50\r\n\r\nStarting Nmap 5.21 ( http://nmap.org ) at 2010-03-11 10:11 中国标准时间\r\nmass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-\r\nservers\r\nNmap scan report for 22.213.80.50\r\nHost is up (0.00s latency).\r\nMAC Address: 00:00:00:00:00:18 (Xerox)\r\nNmap done: 1 IP address (1 host up) scanned in 0.19 seconds\r\n\r\n$nmap-5.21>nmap -sP 22.213.80.93\r\n\r\nStarting Nmap 5.21 ( http://nmap.org ) at 2010-03-11 10:11 中国标准时间\r\nmass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-\r\nservers\r\nNote: Host seems down. If it is really up, but blocking our ping probes, try -PN\r\nNmap done: 1 IP address (0 hosts up) scanned in 0.41 seconds\r\n\r\n$nmap-5.21>ping 22.213.80.50\r\n\r\nPinging 22.213.80.50 with 32 bytes of data:\r\n\r\nControl-C\r\n^C\r\n\r\n\r\n$nmap-5.21>nmap -A -T4 22.213.80.50\r\n\r\nStarting Nmap 5.21 ( http://nmap.org ) at 2010-03-11 10:33 中国标准时间\r\nmass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-\r\nservers\r\nNmap scan report for 22.213.80.50\r\nHost is up (0.038s latency).\r\nAll 1000 scanned ports on 22.213.80.50 are filtered\r\nMAC Address: 00:00:00:00:00:18 (Xerox)\r\nToo many fingerprints match this host to give specific OS details\r\nNetwork Distance: 1 hop\r\n\r\nHOP RTT      ADDRESS\r\n1   37.98 ms 22.213.80.50\r\n\r\nOS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .\r\nNmap done: 1 IP address (1 host up) scanned in 58.30 seconds\r\n\r\n$nmap-5.21>nmap -sS -O 22.213.80.50\r\n\r\nStarting Nmap 5.21 ( http://nmap.org ) at 2010-03-11 10:34 中国标准时间\r\nmass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-\r\nservers\r\nNmap scan report for 22.213.80.50\r\nHost is up (0.046s latency).\r\nAll 1000 scanned ports on 22.213.80.50 are filtered\r\nMAC Address: 00:00:00:00:00:18 (Xerox)\r\nToo many fingerprints match this host to give specific OS details\r\nNetwork Distance: 1 hop\r\n\r\nOS detection performed. Please report any incorrect results at http://nmap.org/submit/ .\r\nNmap done: 1 IP address (1 host up) scanned in 54.81 seconds

zoleo

有些网卡的MAC是可以设置的