1
I'm trying to use tcprewrite to change the source MAC address of some packets. I deliberately chose the prefix AB:CD:EF that does not belong to any hardware manufacturer so that I can distinguish such packets from other real packets. The packets are played to a server via a Cisco switch.
I realized that my server can't capture any packets with the MAC prefix AB:CD:EF, but when I changed the prefix to 00:00:08, which belongs to Xerox, these packets can be captured.
Is this because the switch can tell that the AB:CD:EF MAC prefix is not valid and drops the packets?
I have tried that. Packets with the AB:CD:EF prefix aren't captured, but packets with the 00:00:08 prefix are. Is the switch intelligent enough to recognize invalid MAC prefixes? – Rayne – 2011-10-19T09:01:20.500
1That cannot be the issue because what if that prefix goes valid on the future? The switch would be useless. Check RedGrittyBrick's answer. – m0skit0 – 2011-10-19T09:45:46.820