North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: [Fwd:] Nvidia NICs with duplicate mac addresses

  • From: Jon Kibler
  • Date: Fri Sep 05 12:56:37 2008

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Robert D. Scott wrote:
> Does this MAC present itself all the time, or just during boot?
> 
> Marvel makes a NIC prevalent in some Dell systems, that presents MAC
> 0c00.0000.0000 during its startup process. If you run port security, and
> several people boot their computer within the cam table expiration period,
> port security will disable the port. You can work around it but it is time
> consuming in large networks where port security are enabled.
> 

I know that this doesn't apply here, but a year or so ago I had a client
that had issues with port security continually dropping an end user's
PC. The problem was the MAC address kept changing from Realtek to Cisco.
Sometimes the same NIC would present both MACs at the same time.

It turned out the box was apparently infected with something. Never
could find anything specific (even when booting the Windows box from
Knoppix and scanning for unusual files) except for some large ADS files
that where apparently encrypted. A clean wipe and complete rebuild of
the box fixed the problem.

Jon
- --
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
c: 843-224-2494
s: 843-564-4224

My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkjBZLQACgkQUVxQRc85QlMUpwCfQXrML+jZ8Lkwh3z2QuvldWh6
6+YAn3eqq2GBv7qof+urEGtibAKQf/6m
=un9B
-----END PGP SIGNATURE-----




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.