Re: DoS/DDoS Attack

From: Steve Friedl (steve@unixwiz.net)
Date: Fri Jan 14 2005 - 15:01:41 EST


On Fri, Jan 14, 2005 at 01:26:55PM -0500, seditiosus wrote:
> Correct me if I am wrong, but, I understand that the MAC address is
> left unchanged and can be used to identify the source.

Sorry, you're wrong :-)

The MAC address is at a layer *below* IP and doesn't generally
travel past the local segment.

Steve

---
Stephen J Friedl | Security Consultant | UNIX Wizard | +1 714 544-6561
www.unixwiz.net | Tustin, Calif. USA | Microsoft MVP | steve@unixwiz.net



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:13 EDT