Skip to content

Commit 02addce

Browse files
author
marci
committed
Add articles on MAC addresses in German and English
- Created a new German article titled "MAC Adresse - Was ist das?" covering the definition, structure, and usage of MAC addresses, including commands for displaying and changing MAC addresses, as well as ARP spoofing. - Created a new English article titled "MAC address – what is it?" with similar content, providing an overview of MAC addresses, their structure, and related commands for different operating systems.
1 parent 4f9370a commit 02addce

5 files changed

Lines changed: 274 additions & 1 deletion

File tree

.frontmatter/database/mediaDb.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"assets":{"images":{"posts":{"windows":{"eingabeaufforderung_logo.jpg":{"title":"","caption":"","alt":"Eingabeaufforderung_logo"},"ipconfig_all.png":{"title":"ipconfig_all","caption":"ipconfig_all","alt":"ipconfig_all"},"ipconfig_displaydns.png":{"title":"ipconfig_displaydns","caption":"ipconfig_displaydns","alt":"ipconfig_displaydns"},"ipconfig_flushdns.png":{"title":"ipconfig_flushdns","caption":"ipconfig_flushdns","alt":"ipconfig_flushdns"},"ipconfig_help.png":{"title":"ipconfig_help","caption":"ipconfig_help","alt":"ipconfig_help"},"ipconfig_release.png":{"title":"ipconfig_release","caption":"ipconfig_release","alt":"ipconfig_release"},"ipconfig_renew.png":{"title":"ipconfig_renew","caption":"ipconfig_renew","alt":"ipconfig_renew"},"windows product key.jpg":{"title":"Windows Product Key","author":"","alt":"Windows Product Key"},"cmd_aufrufen.jpg":{"title":"cmd_aufrufen","author":"","alt":"cmd_aufrufen"},"befehl_aktivierung.jpg":{"title":"Windows Product Key aktivieren","author":"","alt":"Windows Product Key aktivieren"},"befehl_key_aendern.jpg":{"title":"windows product key aendern","author":"","alt":"windows product key aendern"},"passwort-aendern-windows-10-bild-1.jpg":{"title":"Passwort-aendern-Windows-Bild-1","author":"","alt":"Passwort-aendern-Windows-Bild-1"},"passwort-aendern-windows-10-bild-2.jpg":{"title":"Passwort-aendern-Windows-Bild-2","author":"","alt":"Passwort-aendern-Windows-Bild-2"},"passwort-aendern-windows-10-bild-3.jpg":{"title":"Passwort-aendern-Windows-Bild-3","author":"","alt":"Passwort-aendern-Windows-Bild-3"},"passwort-aendern-windows-10-bild-4.jpg":{"title":"Passwort-aendern-Windows-Bild-4","author":"","alt":"Passwort-aendern-Windows-Bild-4"},"passwort-aendern-windows-10.jpg":{"title":"passwort-aendern-windows","author":"","alt":"passwort-aendern-windows"}},"adguard":{"adguard-fritzbox-dns-server.png":{"title":"","caption":"","alt":"AdGuard-FritzBox-DNS-Server"},"installation-adguard.png":{"title":"","caption":"","alt":"Installation-AdGuard"},"installationssetup-adguard-bild-2.png":{"title":"","caption":"Installationssetup-AdGuard-Bild-2","alt":"Installationssetup-AdGuard-Bild-2"},"installationssetup-adguard-bild-3.png":{"title":"","caption":"Installationssetup-AdGuard-Bild-3","alt":"Installationssetup-AdGuard-Bild-3"},"installationssetup-adguard-bild-4.png":{"title":"","caption":"Installationssetup-AdGuard-Bild-4","alt":"Installationssetup-AdGuard-Bild-4"},"installationssetup-adguard-bild-5.png":{"title":"","caption":"Installationssetup-AdGuard-Bild-5","alt":"Installationssetup-AdGuard-Bild-5"},"installationssetup-adguard.png":{"title":"","caption":"Installationssetup-AdGuard","alt":"Installationssetup-AdGuard"},"raspberry-pi-ip-adresse.png":{"title":"","caption":"Raspberry-Pi-IP-Adresse","alt":"Raspberry-Pi-IP-Adresse"},"ssh-anmeldung-raspberry-pi.png":{"title":"","caption":"SSH-Anmeldung-Raspberry-Pi","alt":"SSH-Anmeldung-Raspberry-Pi"},"thumbnail-adguard-home-update.png":{"title":"","caption":"","alt":"Thumbnail-AdGuard-Home-Update"},"thumbnail.png":{"title":"","caption":"","alt":"AdGuard Home basic setup"},"update-raspberry-pi-os.png":{"title":"","caption":"","alt":"Update-Raspberry-Pi-OS"},"video-adguard-raspberry-pi-installation.png":{"title":"","caption":"","alt":"Video-AdGuard-Raspberry-Pi-Installation"},"video-thumbnail.png":{"title":"","caption":"","alt":"Video AdGuard Home on Raspberry Pi"},"firefox_fozptqwh3x-1.gif":{"title":"","caption":"","alt":"Download AdGuard Home on Raspberry OS"},"rpi-imager_0hhavk9e8r.gif":{"title":"","caption":"rpi-imager","alt":"rpi-imager"},"rpi-imager_vhfgbf8sge.png":{"title":"","caption":"rpi-imager","alt":"rpi-imager"}},"it-security":{"utm-diagramm.png":{"title":"UTM-Diagramm","author":"","alt":"UTM-Diagramm"},"yarn-phone-2091195_640.png":{"title":"Network-Sniffing","author":"Bild von naobim auf Pixabay","alt":"Network-Sniffing"}}}}},"content":{"posts":{"windows":{}}},"static":{"files":{}}}
1+
{"assets":{"images":{"posts":{"windows":{"eingabeaufforderung_logo.jpg":{"title":"","caption":"","alt":"Eingabeaufforderung_logo"},"ipconfig_all.png":{"title":"ipconfig_all","caption":"ipconfig_all","alt":"ipconfig_all"},"ipconfig_displaydns.png":{"title":"ipconfig_displaydns","caption":"ipconfig_displaydns","alt":"ipconfig_displaydns"},"ipconfig_flushdns.png":{"title":"ipconfig_flushdns","caption":"ipconfig_flushdns","alt":"ipconfig_flushdns"},"ipconfig_help.png":{"title":"ipconfig_help","caption":"ipconfig_help","alt":"ipconfig_help"},"ipconfig_release.png":{"title":"ipconfig_release","caption":"ipconfig_release","alt":"ipconfig_release"},"ipconfig_renew.png":{"title":"ipconfig_renew","caption":"ipconfig_renew","alt":"ipconfig_renew"},"windows product key.jpg":{"title":"Windows Product Key","author":"","alt":"Windows Product Key"},"cmd_aufrufen.jpg":{"title":"cmd_aufrufen","author":"","alt":"cmd_aufrufen"},"befehl_aktivierung.jpg":{"title":"Windows Product Key aktivieren","author":"","alt":"Windows Product Key aktivieren"},"befehl_key_aendern.jpg":{"title":"windows product key aendern","author":"","alt":"windows product key aendern"},"passwort-aendern-windows-10-bild-1.jpg":{"title":"Passwort-aendern-Windows-Bild-1","author":"","alt":"Passwort-aendern-Windows-Bild-1"},"passwort-aendern-windows-10-bild-2.jpg":{"title":"Passwort-aendern-Windows-Bild-2","author":"","alt":"Passwort-aendern-Windows-Bild-2"},"passwort-aendern-windows-10-bild-3.jpg":{"title":"Passwort-aendern-Windows-Bild-3","author":"","alt":"Passwort-aendern-Windows-Bild-3"},"passwort-aendern-windows-10-bild-4.jpg":{"title":"Passwort-aendern-Windows-Bild-4","author":"","alt":"Passwort-aendern-Windows-Bild-4"},"passwort-aendern-windows-10.jpg":{"title":"passwort-aendern-windows","author":"","alt":"passwort-aendern-windows"}},"adguard":{"adguard-fritzbox-dns-server.png":{"title":"","caption":"","alt":"AdGuard-FritzBox-DNS-Server"},"installation-adguard.png":{"title":"","caption":"","alt":"Installation-AdGuard"},"installationssetup-adguard-bild-2.png":{"title":"","caption":"Installationssetup-AdGuard-Bild-2","alt":"Installationssetup-AdGuard-Bild-2"},"installationssetup-adguard-bild-3.png":{"title":"","caption":"Installationssetup-AdGuard-Bild-3","alt":"Installationssetup-AdGuard-Bild-3"},"installationssetup-adguard-bild-4.png":{"title":"","caption":"Installationssetup-AdGuard-Bild-4","alt":"Installationssetup-AdGuard-Bild-4"},"installationssetup-adguard-bild-5.png":{"title":"","caption":"Installationssetup-AdGuard-Bild-5","alt":"Installationssetup-AdGuard-Bild-5"},"installationssetup-adguard.png":{"title":"","caption":"Installationssetup-AdGuard","alt":"Installationssetup-AdGuard"},"raspberry-pi-ip-adresse.png":{"title":"","caption":"Raspberry-Pi-IP-Adresse","alt":"Raspberry-Pi-IP-Adresse"},"ssh-anmeldung-raspberry-pi.png":{"title":"","caption":"SSH-Anmeldung-Raspberry-Pi","alt":"SSH-Anmeldung-Raspberry-Pi"},"thumbnail-adguard-home-update.png":{"title":"","caption":"","alt":"Thumbnail-AdGuard-Home-Update"},"thumbnail.png":{"title":"","caption":"","alt":"AdGuard Home basic setup"},"update-raspberry-pi-os.png":{"title":"","caption":"","alt":"Update-Raspberry-Pi-OS"},"video-adguard-raspberry-pi-installation.png":{"title":"","caption":"","alt":"Video-AdGuard-Raspberry-Pi-Installation"},"video-thumbnail.png":{"title":"","caption":"","alt":"Video AdGuard Home on Raspberry Pi"},"firefox_fozptqwh3x-1.gif":{"title":"","caption":"","alt":"Download AdGuard Home on Raspberry OS"},"rpi-imager_0hhavk9e8r.gif":{"title":"","caption":"rpi-imager","alt":"rpi-imager"},"rpi-imager_vhfgbf8sge.png":{"title":"","caption":"rpi-imager","alt":"rpi-imager"}},"it-security":{"utm-diagramm.png":{"title":"UTM-Diagramm","author":"","alt":"UTM-Diagramm"},"yarn-phone-2091195_640.png":{"title":"Network-Sniffing","author":"Bild von naobim auf Pixabay","alt":"Network-Sniffing"},"unbenanntes-diagramm.jpg":{"title":"MAC-Address Diagram","author":"","alt":"MAC-Address Diagram"},"mac_adressen.jpg":{"title":"Was ist eine mac adresse","author":"","alt":"Was ist eine mac adresse"}}}}},"content":{"posts":{"windows":{}}},"static":{"files":{}}}
10.8 KB
Loading
21.9 KB
Loading
Lines changed: 160 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,160 @@
1+
---
2+
title: MAC Adresse - Was ist das?
3+
date: 2019-02-15
4+
categories:
5+
- Netzwerk
6+
- Tutorials
7+
tags:
8+
- firewall
9+
- netzwerk
10+
- security
11+
- tutorials
12+
description: Was ist eine MAC-Adresse und wofür wird diese verwendet?
13+
preview: ../../../assets/images/posts/it-security/mac_adressen.jpg
14+
hero: /images/posts/it-security/mac_adressen.jpg
15+
menu:
16+
sidebar:
17+
name: Was ist eine MAC-Adresse und wofür wird diese verwendet?
18+
identifier: mac
19+
parent: security
20+
keywords:
21+
- mac adresse
22+
---
23+
24+
## MAC Adressen 
25+
26+
Was ist eine **MAC Adresse** und wofür wird diese gebraucht? Diese Fragen und weitere Begriffe und Funktion rund um das Thema MAC Adressen möchte ich gerne in diesem Artikel erklären. 
27+
28+
## Was ist eine MAC Adresse? 
29+
30+
Zur Identifikation eines netzwerkfähigen Geräts (Host) im Netzwerk dient die **MAC Adresse**. Diese Adresse ist in eigentlich einmalig (dazu später mehr) und stellt die eindeutige Adressierbarkeit eines Geräts sicher.  
31+
32+
## Aufbau
33+
34+
Diese Adresse besteht aus einer 48-Bit langen Adresse und sollte weltweit einmalig sein. Diese Adresse wird im OSI-Modell der Sicherungsschicht 2 (Data-Link-Layer) zugeordnet um eine Adressierung im Netzwerk zu gewährleisten.  
35+
36+
Dargestellt wird die Adresse in der Regel in der hexadezimalen Schreibweise (siehe Bild “Aufbau einer MAC-Adresse") und wird in Bytes getrennt durch einen Doppelpunkt oder Bindestrich dargestellt. Diese Schreibweise / Darstellungsweise nennt man das _kanonisches Format_ und wird in der Regel auch zur Darstellung verwendet.
37+
38+
39+
![MAC-Address Aufbau](/images/posts/it-security/Unbenanntes-Diagramm.jpg)
40+
41+
42+
Aufbau einer MAC Adresse
43+
44+
45+
46+
Die ersten 24 Bit sind fest den verschiedenen Herstellern (Herstellerkennung) zugeordnet und werden von der IEEE (Institute of Electrical and Electronics Engineers) vergeben. Diese Herstellerkennung wird auch Organizationally Unique Identifier (OUI) genannt und kann Online in einer Hersteller-Datenbank abgerufen werden. 
47+
48+
Die hinteren 24 Bit wird als Organizationally Unique Address (OUA) bezeichnet und können vom Hersteller frei, aber nur einmalig für die Geräteklasse vergeben werden. 
49+
50+
## Broadcast Adresse
51+
52+
Als Broadcast Adresse wird eine Pseudo-Adresse bezeichnet, wo alle 48 Bits auf "1" geschaltet sind,
53+
54+
**Broadcast Cast MAC-Adresse:**
55+
56+
```sh
57+
ff-ff-ff-ff-ff-ff und in Bit-Form 11111111 11111111 11111111 11111111 11111111 11111111
58+
```
59+
60+
und im LAN an alle Geräte verschickt wird, aber nicht in andere LAN´s gesendet werden kann.
61+
62+
### Link zur Hersteller Datenbank von der IEEE: 
63+
64+
[https://regauth.standards.ieee.org/standards-ra-web/pub/view.html#registries](https://regauth.standards.ieee.org/standards-ra-web/pub/view.html#registries)
65+
66+
## Eigene MAC-Adresse anzeigen 
67+
68+
Um die Adresse von eurem Gerät anzuzeigen gibt es ja nach Betriebssystem verschiedene Befehle die ihr in der Kommandozeile (CMD, Powershell, Shell) eingeben könnt. Die Befehle zur Anzeige der Adresse lauten für die einzelnen Systeme wie folgt: 
69+
70+
### Windows physikalische Adresse
71+
72+
Zuerst mit der Tastenkombination Windows-Taste+R die Kommandozeile (CMD) öffnen und dann den folgenden Befehl eingeben:
73+
74+
```msdos
75+
ipconfig /all
76+
```
77+
78+
79+
80+
### Eigene Adresse unter FreeBSD anzeigen
81+
82+
```sh
83+
ipconfig -a
84+
```
85+
86+
### Eigene Adresse unter Linux anzeigen
87+
88+
```sh
89+
ip a
90+
91+
ip link show <Gerät>
92+
```
93+
94+
Wichtig ist generell, dass man natürlich auch das richtige Netzwerkgerät ausliest, da die Rechner meistens mehrere Netzwerkadapter besitzen (z.B. WLAN).
95+
96+
Solltet ihr die IP-Adresse trotz der oberen Befehle nicht auslesen können, dann nutzt ein Crossover-Kabel das ihr mit einem Rechner verbindet. Somit sind dann beide Geräte im gleichen Netzwerksegment und nutzt dann die folgenden Befehle:
97+
98+
#### Windows
99+
100+
```msdos
101+
arp -a
102+
```
103+
104+
#### FreeBSD
105+
106+
```sh
107+
arp -a
108+
```
109+
110+
#### Linux
111+
112+
```sh
113+
arp -a
114+
ip neigh
115+
```
116+
117+
118+
## Ändern einer MAC-Adresse 
119+
120+
Das ändern der Adresse kann in manchen Situationen sinnvoll sein. Wenn du zum Beispiel ein Hochverfügbarkeitsszenario nutzen möchtest, dann kann das ändern der Adresse sehr sinnvoll sein. Sollte in einem Redundanz-Verbund ein Server ausfallen, so kann durch das Ändern der MAC-Adresse auf dem Ersatzserver, ein umständliches umkonfigurieren des Systems dadurch erspart bleiben. Genauso kannst du auch andere Ersatzgeräte im Netzwerk so umstellen.
121+
122+
### Die folgenden Befehle kannst du hierfür nutzen
123+
124+
#### Windows
125+
126+
```msdos
127+
Registery-Eintrag ändern oder auch falls angeboten in der Systemsteuerung
128+
```
129+
130+
#### Linux
131+
132+
```sh
133+
ifconfig <Device> hw ether <MAC-Adresse neu>
134+
```
135+
136+
#### FreeBSD
137+
138+
```sh
139+
ifconfig <Device> link <MAC-Adresse neu>
140+
```
141+
142+
## ARP-Spoofing (böswilliges ändern) 
143+
144+
Zu guter Letzt gehe ich hier noch auf das böswillige ändern einer MAC-Adresse ein. Diese Methode wird bei Man-in-the-Middle Attacken genutzt.
145+
146+
Hier wird auch die Adresse im ARP-Cache gesetzt und so eine manipulierte ARP-Nachricht von Host A an Host B verschickt. Diesem Host B wird somit die Adresse des Angriffs-Device untergejubelt, wobei dieser wiederum alle zukünftigen Pakete an den Angreifer-Gerät sendet und nicht vorgesehen an Host A.
147+
148+
Solch ein kompromittierten ARP-Cache ist gut dadurch erkennbar, dass alle IP-Adressen auf eine MAC-Adresse zeigen. Ein Beispiel siehst du im nächsten Abschnitt.
149+
150+
### Beispiel für ein ARP-Spoofing im ARP-Cache
151+
152+
```sh
153+
RE1:~# arp -a
154+
? (192.168.1.10) auf 00:2c:33:2f:7e:88 [ether] auf eth0
155+
? (192.168.1.11) auf 00:2c:33:2f:7e:88 [ether] auf eth0
156+
? (192.168.1.12) auf 00:2c:33:2f:7e:88 [ether] auf eth0
157+
? (192.168.1.13) auf 00:2c:33:2f:7e:88 [ether] auf eth0
158+
```
159+
160+
Lines changed: 113 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,113 @@
1+
---
2+
title: MAC address – what is it?
3+
date: 2019-02-15
4+
categories:
5+
- Network
6+
- Tutorials
7+
tags:
8+
- firewall
9+
- network
10+
- security
11+
- tutorials
12+
description: What is a MAC address and what is it used for?
13+
preview: ../../../assets/images/posts/it-security/mac_adressen.jpg
14+
hero: /images/posts/it-security/mac_adressen.jpg
15+
menu:
16+
sidebar:
17+
name: What is a MAC address and what is it used for?
18+
identifier: mac
19+
parent: security
20+
keywords:
21+
- mac address
22+
lastmode: 2025-07-28T14:26:58.650Z
23+
---
24+
## MAC addresses
25+
What is a **MAC address** and what is it used for? In this article, I would like to explain these questions and other terms and functions related to MAC addresses.
26+
## What is a MAC address?
27+
The **MAC address** is used to identify a network-enabled device (host) in a network. This address is actually unique (more on this later) and ensures that a device can be addressed unambiguously.
28+
## Structure
29+
This address consists of a 48-bit address and should be unique worldwide. This address is assigned to layer 2 (data link layer) in the OSI model to ensure addressing in the network.
30+
31+
The address is usually represented in hexadecimal notation (see image “Structure of a MAC address”) and is represented in bytes separated by a colon or hyphen. This notation/representation is called the _canonical format_ and is usually also used for representation.
32+
33+
![MAC address structure](images/posts/it-security/Unbenanntes-Diagramm.jpg)
34+
35+
Structure of a MAC address
36+
37+
38+
The first 24 bits are permanently assigned to the various manufacturers (manufacturer identification) and are allocated by the IEEE (Institute of Electrical and Electronics Engineers). This manufacturer identification is also called the Organizationally Unique Identifier (OUI) and can be found online in a manufacturer database.
39+
The last 24 bits are referred to as the Organizationally Unique Address (OUA) and can be assigned freely by the manufacturer, but only once for each device class.
40+
## Broadcast address
41+
A broadcast address is a pseudo-address where all 48 bits are set to “1”.
42+
43+
**Broadcast MAC address:**
44+
45+
```sh
46+
ff-ff-ff-ff-ff-ff and in bit form 11111111 11111111 11111111 11111111 11111111 11111111
47+
```
48+
and is sent to all devices in the LAN, but cannot be sent to other LANs.
49+
### Link to the IEEE manufacturer database:
50+
[https://regauth.standards.ieee.org/standards-ra-web/pub/view.html#registries](https://regauth.standards.ieee.org/standards-ra-web/pub/view.html#registries)
51+
## Display your own MAC address
52+
To display the address of your device, there are different commands depending on your operating system that you can enter in the command line (CMD, Powershell, Shell). The commands for displaying the address are as follows for the individual systems:
53+
### Windows physical address
54+
First, open the command line (CMD) with the key combination Windows key+R and then enter the following command:
55+
56+
```msdos
57+
ipconfig /all
58+
```
59+
60+
61+
### Display your own address under FreeBSD
62+
```sh
63+
ipconfig -a
64+
```
65+
### Display your own address under Linux
66+
```sh
67+
ip a
68+
ip link show <device>
69+
```
70+
It is important to select the correct network device, as computers usually have multiple network adapters (e.g., Wi-Fi).
71+
If you are unable to read the IP address using the above commands, use a crossover cable to connect the two computers. This will place both devices in the same network segment, allowing you to use the following commands:
72+
#### Windows
73+
```msdos
74+
arp -a
75+
```
76+
#### FreeBSD
77+
```sh
78+
arp -a
79+
```
80+
#### Linux
81+
```sh
82+
arp -a
83+
ip neigh
84+
```
85+
86+
## Changing a MAC address
87+
Changing the address can be useful in some situations. For example, if you want to use a high-availability scenario, changing the address can be very useful. If a server fails in a redundancy network, changing the MAC address on the replacement server can save you the hassle of reconfiguring the system. You can also change other replacement devices in the network in the same way.
88+
### You can use the following commands for this
89+
#### Windows
90+
```msdos
91+
Change the registry entry or, if offered, in the Control Panel
92+
```
93+
#### Linux
94+
```sh
95+
ifconfig <Device> hw ether <New MAC address>
96+
```
97+
#### FreeBSD
98+
```sh
99+
ifconfig <Device> link <New MAC address>
100+
```
101+
## ARP spoofing (malicious modification)
102+
Last but not least, I will discuss the malicious modification of a MAC address. This method is used in man-in-the-middle attacks.
103+
Here, the address is also set in the ARP cache, and a manipulated ARP message is sent from host A to host B. Host B is thus given the address of the attacking device, which in turn sends all future packets to the attacker's device instead of to host A as intended.
104+
A compromised ARP cache is easily recognizable by the fact that all IP addresses point to one MAC address. You can see an example in the next section.
105+
### Example of ARP spoofing in the ARP cache
106+
```sh
107+
RE1:~# arp -a
108+
? (192.168.1.10) on 00:2c:33:2f:7e:88 [ether] on eth0
109+
? (192.168.1.11) on 00:2c:33:2f:7e:88 [ether] on eth0
110+
? (192.168.1.12) on 00:2c:33:2f:7e:88 [ether] on eth0
111+
? (192.168.1.13) on 00:2c:33:2f:7e:88 [ether] on eth0
112+
```
113+

0 commit comments

Comments
 (0)