Ask Your Question
0

MAC 00:ff:ff:ff:ff:ff working on my Net

asked 2019-03-08 16:08:42 +0000

epick gravatar image

updated 2019-03-08 16:10:02 +0000

Checking my network I discovered a device (Projector ) with the MAC address (00:ff:ff:ff:ff:ff) and an IP assigned by my DHCP server, but I can't understand how this is working because I have control over the projector and I would like to know what happens if I leave the device working on my network. This is the capture on Wireshark, thanks

I attached image https://www.screencast.com/t/wbNoDXP5...

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-03-08 16:24:59 +0000

Packet_vlad gravatar image

Although this MAC address looks strange and I can't find any matching OUI value, it has zero IG bit (this is unicast address), which means a device with such MAC will work normally if you leave it as it is.

edit flag offensive delete link more

Comments

Thanks for the answer, but this is normal or is out of the standard of assignation the MAC address of a network device? Can this impact the performance of my network in the future? thanks again

epick gravatar imageepick ( 2019-03-08 17:49:36 +0000 )edit

This is not normal, as in, the unicast MAC address does not fall in range of an allocated OUI. Therefore it cannot be guaranteed the MAC address will be unique on the network, causing all kinds of problems. Also the destination address (broadcast) does not match the multicast IP address, so the device does misbehave somehow.

Jaap gravatar imageJaap ( 2019-03-08 18:23:53 +0000 )edit

For sure this is out of the standard of assignation (OUI is not listed in database). But at the same time this will not impact network performance if only you don't have one more device with the same MAC in the same broadcast domain.

You can ask manufacturer about the reason of using this MAC also.

Packet_vlad gravatar imagePacket_vlad ( 2019-03-08 18:26:43 +0000 )edit

Ok, thanks for the clarification

epick gravatar imageepick ( 2019-03-08 18:30:37 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2019-03-08 16:08:42 +0000

Seen: 1,467 times

Last updated: Mar 08 '19

Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
about | faq | help | privacy policy | terms of service
Powered by Askbot version 0.10.2