posted on Mar, 3 2012 @ 03:06 PM
Originally posted by Thermo Klein
Originally posted by spyder550
Don't worry about the MAC address it is removed from the packet header when it hits the gateway. The MAC address is not routable and is only visible
to interfaces on that that shared network. Each interface along the route removes the MAC address and replaces it with its own.
Do a simple format if your worried.
edit on 1-4-2011 by spyder550 because: (no reason given)
Do you happen to have a source for this?
From what I've heard from hacker friends of mine (in the past, not recently) is that the best way for TPTB to track us is via MAC address.
What would be the purpose of not having attached MAC address in our world of increased tracking of everything
This is how the OSI Model
works. Consider MAC addresses to only change when they enter a layer 3
The Source and Destination IP address is not going to change. Host 1 IP address will stay as being the source IP and the Host 2 IP address will stay
the destination IP address.
The MAC address is going to change each time it goes from one hope to another. (Except switches... they don't change anything). Frame leaving HOST 1
is going to have a source MAC of Host 1 and a destination MAC of Router 1.
Router 1 is going to strip that info off and then will make the source MAC address of Router1's exiting interface, and making Router2's interface as
the destination MAC address.
Then the same will happen... Router2 is going to change the source/destination info to the source MAC being the Router2 interface that it is going
out, and the destination will be Host2's MAC address.
MAC's can be traced provided there is an IP address associated and that the source MAC has not been altered (spoofed). MAC's are not traced on the
Also there is a lot of confusion out there surrounding drive wiping. The 7, 10, 25 times recommendations are a myth. One wipe will suffice as
according to many leading forensics folks. This doesn't mean deleting the data, it means wiping the drive as noted by some other members posts.
edit on 3-3-2012 by brill because: (no reason given)