MAC spoofing in a switch LUT

Replies

• 

  Ashraf HZ

  durga

  as title says it all. Thsi thread can be taken as a continuation of Goyal's thread "changing Physcial address of a computer"
  Now consider this where you have a 4 port switch of which one port(say port no 4) is connected to a hub which supports 3 more systems.
  switch A, HUB H
  Switch LOOK UP table can be something like
  MAC----PORT
  A ------1
  B ------2
  C ------3
  D ------4
  D ------4 // this should have been E -----4 , E has spoofed D MAC ID
  F-------4
  
  now, if A has data for original D , how does it flow without being intercepted by E acting as D.
  infact even without a hub or anyhting , just a normal switch lookups having a faulty entry, is there a possible solution to send datagrams securely?

  In this instance, you may need to rely on the upper layers of TCP/IP for the required security.
• 

  optimystix

  ash

  In this instance, you may need to rely on the upper layers of TCP/IP for the required security.

  but since the mac has been spoofed , wont the arp itself be misled ?