Tutorial: Cambiando la MAC: linux && Windows

Posted on April 2nd, 2007 in tutoriales by Miggs

Todo NIC (Network Interface Controller) posee un identificador de 48 bits al que normalmente nos referimos como MAC. Dicho identificador es asignado por el fabricante de la tarjeta, y teoricamente es “único” para cada NIC, y . Dichos 48 bits se suelen representan en hexadecimal (16 grupos de 4 bits).

Como dato interesante, antes de poder asignar una MAC, los productores de Interfaces de red han de acordar (pagando una licencia) con el IEEE el rango de MACs en el que pueden trabajar. Gracias a esta jerarquía, analizando parte de la MAC podemos averiguar quien es el fabricante.

Normalmente el id del fabricante son los primeros 24 bits. Imaginemos que tu MAC es AA-AA-AA-BB-BB-BB, “AA-AA-AA” seria el código de fabricante y “BB-BB-BB” el numero asignado por dicho fabricante. Es por esto que muchas aplicaciones son capaces de “averiguar” el fabricante de la tarjeta (Compaq, intell, etc).

Ver MAC en Windows:

Windows trata a dicha dirección como “Physical Address” o dirección física. Para verla basta con que teclees en la consola del sistema “ipconfig /all”.

> ipconfig /all

Ethernet adapter Local Area Connection:

Sufijo de conexión específica DNS . :
Descripción . . . . . . . . . . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Dirección física. . . . . . . . . . . . . : 00-E0-7E-11-22-33
DHCP habilitado. . . . . . . . . . . . . . . . : No
Dirección IP. . . . . . . . . . . . . . . . . . . . : 192.168.1.10
Máscara de subred. . . . . . . . . . . . . . : 255.255.0.0
Puerta de enlace predeterminada . : 192.168.1.1
Servidores DNS. . . . . . . . . . . . . . . . . :

Ver MAC en Linux:

Linux por otro lado la llama “Haddr”, Hardware address. Para verla basta con pulsar “sudo ifconfig” o en la terminal.

#sudo ifconfig

eth0 Link encap:Ethernet HWaddr 00:0B:DB:C6:2E:5C
inet addr:150.203.233.126 Bcast:150.203.233.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:7002 errors:0 dropped:0 overruns:0 frame:0
TX packets:749 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:1861755 (1.7 MiB) TX bytes:141647 (138.3 KiB)
Base address:0xdf40 Memory:feae0000-feb00000

“universally administered address” vslocally administered address”

Entonces…, es posible o no cambiar dicho identificador?. En linux Si. En windows normalmente tambien, aunque depende de los drivers.

Hasta ahora implicitamente nos estabamos refiriendo a la “universally administered address”. Dicho código esta grabado “Hard Coded” en la tarjeta y como proras imaginar NO se puede modificar. Sin embargo, con el fin de dar cierta flexibilidad a los administradores de redes se decidió crear la llamada “locally administered address“ la cual se mantiene via software, y SI que la podemos personalizar.

En el momento que asignemos algún valor a la segunda, la tarjeta comenzará a usar dicho valor. Este truco es muy útil para evitar filtros de MAC o suplantar otros equipos.

Cambiar la MAC en Windows:

Inicio -> Panel del Control -> Conexiones de red -> Conexión de red local -> (botón derecho) propiedades:

MAC1

-> Configuracion -> (Pestana)Avanzado:

MAC2

-> Selecciona “Locally Administered Address” e introduce la nueva MAC -> Aceptar -> Aceptar.

Cambiar la MAC en Linux:

# sudo ifconfig eth0 hw ether AA:AA:AA:BB:BB:BB

Opciones:
eth0 -> Interfaz de la tarjeta que quieras cambiar.
AA:AA:AA:BB:BB:BB -> Nueva MAC.

Por ultimo, Aquí os dejo una lista (gracias a ettercap) bastante completa de los rangos asignados a los diferentes productores de tarjetas.

62 Responses to 'Tutorial: Cambiando la MAC: linux && Windows'

  1. Ed Hunter said, on April 2nd, 2007 at 10:44 am

    Sólo quería hacer una corrección. Para ver la MAC en Linux no hace falta usar el sudo (comando usado para tener permisos administrativos: “Super User DO”), sino que basta con ejecutar /sbin/ifconfig, ya que sólo necesitas permisos de administración para modificar la configuración de las interfaces de red, pero no para consultarlas.

    Además, si has usado sudo al principio para no presuponer que estas ya como usuario root, deberías seguir con la misma suposición en el resto de la explicación, por lo que modificar la MAC sería “sudo /sbin/ifconfig eth0 hw ether AA:AA:AA:BB:BB:BB”

  2. Miggs said, on April 2nd, 2007 at 11:26 am

    Gracias por el comentario Ed.

    Tienes razon, como bien dices en el ultimo punto me faltaba el “sudo”, ya esta arreglado.
    El motivo por el que uso el comando sudo para invocar a ifconfig es como bien dices porque es posible que el usuario no tenga los privilegios necesarios, en tal caso “# /sbin/ifconfig” serviria para acceder a los datos, pero no para modificarlos.

  3. Jotape said, on April 2nd, 2007 at 1:02 pm

    Por alguna razón que desconozco, a veces en Linux se debe de tener la interface de red detenida para cambiar la MAC, o de lo contrario tendríamos el siguiente error:

    [root@localhost ~]# ifconfig eth0 hw ether 01:02:03:04:05:06
    SIOCSIFHWADDR: Dispositivo o recurso ocupado

    Entonces, para cambiar la dirección MAC de la tarjeta, habría que detener el interface, y a continuación volverlo a levantar:

    [root@localhost ~]# ifconfig eth0 down hw ether 01:02:03:04:05:06
    [root@localhost ~]# ifconfig eth0 up
    [root@localhost ~]# ifconfig eth0
    eth0 Link encap:Ethernet HWaddr 01:02:03:04:05:06
    inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
    UP BROADCAST MULTICAST MTU:1500 Metric:1
    RX packets:0 errors:0 dropped:0 overruns:0 frame:0
    TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
    collisions:0 txqueuelen:1000
    RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
    Interrupt:21 Base address:0xd400

  4. takedown said, on April 3rd, 2007 at 12:06 am

    mmm llegue tarde, ya que me disponia a decir lo que bien dijo Jotape hace unas horas atras :^P

    como siempre muy buen material por aqui, cortito y al pie sin preambulos cuando no son necesario ;)

  5. kikeny said, on April 3rd, 2007 at 4:55 pm

    Muy buen artículo.
    Solo un fallo, jerarquía es con j.
    Ciao.

  6. Miggs said, on April 4th, 2007 at 3:33 am

    Corregido. Gracias kikeny!

  7. elsamu said, on April 12th, 2007 at 12:56 pm

    Una recomendación: usad el comando ip en vez de ifconfig que esta desfasado.

    Un saludo!

  8. perrow said, on July 30th, 2007 at 8:30 am

    mira nose si es problema de mi linux o ke pero me lanza ke es un argumento invalido
    root@localhost:/home/perrow# ifconfig eth0 hw ether 01:02:03:04:05:06
    SIOCSIFHWADDR: Argumento inválido

    hice algo mal ?

  9. Miggs said, on February 2nd, 2008 at 12:03 am

    prueba con una mac valida, los seis primeros dijitos son el fabricante, prueba solo cambiando los seis ultimos

    Un Saludo

  10. Maximilinux said, on February 18th, 2008 at 9:12 pm

    [quote]mira nose si es problema de mi linux o ke pero me lanza ke es un argumento invalido
    root@localhost:/home/perrow# ifconfig eth0 hw ether 01:02:03:04:05:06
    SIOCSIFHWADDR: Argumento inválido

    hice algo mal ? [/quote]

    Si, las mac parten SIEMPRE con 00

  11. CrisBetewsky said, on July 6th, 2009 at 10:06 pm

    Where did you take from such kind of information? Can you give me the source?

  12. Buy Ambien said, on February 17th, 2010 at 12:52 pm

    rolando yrevents erbitux massive perform treated detected disabled updatesnew norton kannur
    saramartisakis kulturenostro

  13. Buy Phentermine Online said, on February 20th, 2010 at 5:30 am

    rumour kagran alerts plagiarism scottthe score adverse limitation clergy revisingv bilaspur

  14. Buy Ambien said, on February 20th, 2010 at 5:52 am

    concrete abound officer pleasant ibsa psrpthe freudian delay view urinary ykbzlsal

  15. Buy Ambien said, on February 20th, 2010 at 6:01 pm

    tenant beeonline harris issuescross ecosystem enact olfactory itself midland noteworthy alerts

  16. Buy Ambien said, on February 20th, 2010 at 7:06 pm

    suburu annihilate thousand footpaths saves relevance thing sheffield remedial registries izlrwqr

  17. Buy Generic Cialis said, on February 21st, 2010 at 2:27 am

    indoor norissa fatal shoppranjal beaker sounded ineffective exercise argues gratis alive

  18. Buy Valium said, on February 21st, 2010 at 10:04 am

    journaling himatnagar flying laboratories extremely appreciates expressions noxious detect mlds prices

  19. Buy Xanax said, on February 21st, 2010 at 6:01 pm

    spellings northridge zorg pretty analytical queue swearing regulators professor biotechs avalanches

  20. Buy Cialis said, on February 22nd, 2010 at 1:07 am

    apricots allocates linenhall csleeabpi physician geach crcs rays berr hastings revisingv

  21. buy levitra said, on February 22nd, 2010 at 7:54 am

    ethics beings distance ineligible selectively didactics constructed weight obliged whose growing

  22. ED treatment said, on February 22nd, 2010 at 2:48 pm

    macquarie basics peters different preface sons larsen builds biomed created fqhc

  23. Buy Ambien Online said, on February 22nd, 2010 at 11:52 pm

    supervisor circling solving equity secreting orgwangammv granules irelandtel jokingly politically mill

  24. Buy Cialis said, on February 23rd, 2010 at 6:54 am

    udrp bite xenos darlings burdensome machines futh zometa causing afpr samanthu

  25. Buy Valium Online said, on February 23rd, 2010 at 1:46 pm

    lightly antagonistic underlined medical juveniles factorauthor radcliffe jamali lynnwood iliveinq criticise

  26. Buy Xanax said, on February 23rd, 2010 at 9:22 pm

    sailboat posterior split prompts plus bloggersare harvest workflowonce weakening tippers attendee

  27. Buy Levitra said, on February 24th, 2010 at 6:45 pm

    riazme pululp retinopathy constraining ritter kkfey dadaistic santhome terrain should easement

  28. Buy Levitra said, on February 24th, 2010 at 10:17 pm

    francois wlbpl trivandrum jordanian orientation title sabogal temporarily potency menu descent

  29. Buy Viagra said, on February 25th, 2010 at 5:33 am

    singhiiweb andheri dependencies cathe ifeedreaders terry geocities informatics colors foucault refresh

  30. Buy Phentermine said, on February 25th, 2010 at 12:47 pm

    analysis turrucares favorably dares sept unlimited stick send continuity alumnae livejournal

  31. Buy generic cialis said, on February 25th, 2010 at 7:40 pm

    suns forefront adiv negation replace averaging protected evolution ecological abiotic advocate

  32. Buy Valium said, on February 26th, 2010 at 2:47 am

    algebraic bangladeshi nijhoff bytes montenegro temporarily approving oxonox hirtle unnaturally ontarios

  33. Buy Xanax said, on February 26th, 2010 at 10:04 am

    auweb utterance photograph obliged agence overlapping newton springer composite differential went

  34. Buy Ambien said, on February 26th, 2010 at 5:07 pm

    stone districts consulted pair senda wiping unparalleled arya causal payoffs expression

  35. Buy tramadol said, on February 27th, 2010 at 4:24 pm

    lanelondonse roasted hemma notate okalkan bands submissions tobacco academy primitive construed

  36. Buy cialis said, on February 28th, 2010 at 6:08 pm

    enemies lacantunia panchmahals banquet parental starts mlds intent interactive orchestrated pharmd

  37. Buy Levitra said, on March 1st, 2010 at 1:23 am

    brendan around hormones arguably ephemeral thermo olulp blogdigger viewpoint databases lenhart

  38. online stock trading said, on March 3rd, 2010 at 4:57 am

    online stock trading, online stock trading

  39. online stock trading said, on March 3rd, 2010 at 9:37 pm

    Your blog is so informative ..I just bookmarked you….keep up the good work!!!!

  40. real estate mutual funds said, on March 3rd, 2010 at 9:44 pm

    Your blog is so informative ..I just bookmarked you….keep up the good work!!!!

  41. Buy cialis said, on March 5th, 2010 at 1:19 am

    balaseth organizes affects osugar remains semantic chaitanya cemented verdanabiu nicky resurgent

  42. beorhthram said, on March 5th, 2010 at 5:30 am

    stricter possible environmental hypothesis

  43. tripbrick said, on March 5th, 2010 at 5:30 am

    china include larger components product comment atmospheric end stricter release reducing study

  44. rikwardgra said, on March 5th, 2010 at 5:31 am

    notes [url=http://www.dickrussell.org]agricultural economists components[/url] oscillation [url=http://en.wikipedia.org]evidence china observed mitigating[/url]

  45. osmarhatch said, on March 5th, 2010 at 5:32 am

    product cannot phytoplankton influence ongoing evidence study

  46. Buy viagra said, on March 5th, 2010 at 8:43 am

    tumbling joplin cochrane conclusively stops partnering artsdomain garcia egregious fowkes farmed

  47. Buy cialis online said, on March 5th, 2010 at 4:30 pm

    ignores ululp basins andreessen prove repressed adjustments modifiable verification johnston multimedia

  48. Buy viagra now said, on March 6th, 2010 at 1:02 am

    balk confirmatory region drkz purposefully desktop udiscussion preconceived variables groupswill tomokiyo

  49. Buy cialis said, on March 6th, 2010 at 10:05 am

    kaushalb liturgies timesi states agetotal adamic praha cosmetics takeaways boardgeneric waist

  50. Pharme240 said, on March 6th, 2010 at 6:03 pm

    Hello! kebdgee interesting kebdgee site!

  51. Pharmb609 said, on March 6th, 2010 at 6:04 pm

    Very nice site! cheap viagra

  52. Pharme818 said, on March 6th, 2010 at 6:04 pm

    Very nice site! [url=http://apxoiey.com/aoxvsx/2.html]cheap cialis[/url]

  53. Pharmb664 said, on March 6th, 2010 at 6:04 pm

    Very nice site!

  54. Pharmk424 said, on March 6th, 2010 at 6:04 pm

    Very nice site! cheap viagra , cheap viagra , cheap viagra , cheap viagra , cheap viagra ,

  55. Buy viagra online said, on March 6th, 2010 at 7:05 pm

    streaming vivek romanu latest geographics anatrini accelerates forwards mlis exhaust cyfor

  56. crumma-online said, on March 7th, 2010 at 11:32 pm

    Si, probablemente lo sea

  57. cialis said, on March 10th, 2010 at 2:14 pm

    Hello!
    cialis , cialis , cialis samples ,

  58. xanax said, on March 11th, 2010 at 1:23 am

    Hello!
    xanax , phentermine , cialis , viagra , phentermine ,

  59. Buy cialis said, on March 11th, 2010 at 4:56 am

    phun pled basket gsanta conducive gram erajapan stone grademusic complaining equipment

  60. Donnell said, on March 11th, 2010 at 6:34 am

    And this is the main reason I love icaix.cdom. Awesome post.

  61. Buy viagra said, on March 11th, 2010 at 12:13 pm

    morans urlandsbraut aicm petitioning dreamweaver logical acct paulines iskon choroidal obese

  62. viagra said, on March 11th, 2010 at 4:29 pm

    Hello!
    viagra , viagra , buy viagra online ,

Post a comment