[lug] MAC Addresses and IPv6 Question

D. Stimits stimits at comcast.net
Tue Dec 8 21:14:21 MST 2020


> On 12/08/2020 8:40 PM Zan Lynx <zlynx at acm.org> wrote:
> 
>  
> On 12/8/2020 6:52 PM, D. Stimits wrote:
> > Hi,
> > I recently added some logging for firewall on a new Ubuntu install, and 
> > have noticed that when blocking an IPv6 address, the MAC address is 14 
> > bytes (versus the IPv4 showing 6 bytes). Is a 14-byte MAC address part 
> > of IPv6 (seems like it shouldn't be due to being a PHY, but this is the 
> > association I've seen)? What is the meaning of a 14-byte MAC?
> 
> That might be the entire Ethernet frame header. MAC Dest (6) + MAC 
> Source (6) + EtherType (2)

That makes sense. Still matches a PHY regardless of IPv4 or 6. Just more in one log line.

> 
> 
> -- 
>                  Knowledge is Power -- Power Corrupts
>                          Study Hard -- Be Evil
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: irc.hackingsociety.org port=6667 channel=#hackingsociety


More information about the LUG mailing list