MAC Spoofing and Virtual Interfaces: Why Layer 2 Addresses Are Not Hardware Identity
How software overrides, virtual machine NICs, container bridge networks, and MAC spoofing sever the link between MAC addresses and physical identity.
How MAC addressing works and what it can and cannot tell you.
How software overrides, virtual machine NICs, container bridge networks, and MAC spoofing sever the link between MAC addresses and physical identity.
How switches use CAM tables for MAC learning and routers use ARP tables to bridge Layer 2 frames to Layer 3 IP packets.
An analysis of Wi-Fi MAC address randomisation across iOS, Android, and Windows, its setting of the U/L bit, and the impact on static network management.
How the IEEE OUI registry functions, difference between MA-L/MA-M/MA-S blocks, and why vendor lookups often identify chipmakers rather than final device brands.
A deep dive into EUI-48 bit fields, universal vs local flags, multicast bits, and standard hexadecimal notation.