<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<br><div><div>On Nov 28, 2007, at 12:41 AM, Richard Bennett wrote:</div><blockquote type="cite"><blockquote type="cite"><font class="Apple-style-span" color="#000000"><br></font> </blockquote><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><br></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Yes, but if MAC address access control is active you wouldn't get access <span class="Apple-converted-space"> </span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">to the wireless network to do the sniffing.</div></blockquote><div><br class="webkit-block-placeholder"></div>I'm certainly no expert, but I think the point is that wireless networks are like radios - they broadcast their content without regard to any listeners. While my laptop may not be permitted to participate in the network itself, it isn't prevented from listening merely by MAC address controls on the router. I can sniff the packets "out of thin air" and determine the MAC address or addresses that *are* allowed to participate in the network, and then alter my MAC address to one of those. </div><div><br><blockquote type="cite"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Do you think you would still be able to monitor the broadcast address and <span class="Apple-converted-space"> </span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">ARP packets even if your MAC address had not been whitelisted?</div></blockquote><div><br class="webkit-block-placeholder"></div>Yes.</div><div><br class="webkit-block-placeholder"></div><div>Mark<span class="Apple-style-span" style="font-family: 'Gill Sans'; "></span></div><div><span class="Apple-style-span" style="font-family: 'Gill Sans'; ">--</span></div><div><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Optima; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: 'Gill Sans'; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div>Release 7.10, Kernel 2.6.22-14-generic</div><div>Dual 3.4 GHz Intel(R) Pentium(R) 4 CPU</div><div>2.2 GB RAM, ATI Radeon X300 Graphics</div><div>Registered Linux User # 458073</div><div><br class="webkit-block-placeholder"></div></span><br class="Apple-interchange-newline"></span> </div><br></body></html>