Scanning for Macs and why it no longer works!

[galonki]

Hi, there to all.
As you all know in the past it was possible to just scan for macs using different apps but for me it no longer works, this thread is for people to share their side of the story whether it still works or not.

In the past i used to use two main programs:

DHCP Force - no input mac required - press start sniffing.
DHCP Sniffer - input mac required and using working mac and brute force.

Dhcp force

In the past when i used to run DHCP force it would scan for hours and hours and for example pick up around 1000 macs. Alot of these would be duplicate and most just empty with no config info etc.
But you would get about 50 macs which have full info such as tftp, config file name.

Now, if you do the same thing well at least in my area; everything is the same except one thing, i no longer pick up any macs with info. So not a single mac that tells me their config file name. And yes not even jumbled letter for config filename.


Dhcp Sniffer

In the past i would place a working mac in the mac box, select brute force and click discover and in about 1 hour i would pick up around 20 macs with info including config filename.

Now, if you do the same thing all you get after even 3-4 hours is your mac but with slightly different endings and no info such as config name with any of them.


So it is from this that i am concluding that at least in my area, you can no longer scan for macs.

Am i right?

Does anyone else also have the same problem?

Does anyone else still have luck when scanning?

Please share your situation, so that everyone can know that they are not doing anything wrong, its just that mac scanning is a thing of the past.

for most.

[FrInGe]

I don't understand all this 'mac sniffing don't work anymore'...

I scanned last week and within minuets I had about 7 or 8 macs and not one of them being 00:14....I left it scanning for a further 20mins and end result I had about 40 macs, I'm not saying they all work cause I'm not daft enough to try them on my own UBR but I have sent them onto my mate across town to try them on his modem.

I will scan again tonight for about 20mins and see if I can pick any new ones up.

Can never have to many macs as they say!!

[gelboy]

im scanning with dhcp sniffer i get about 20 good to swap macs a time i think the confusion is that people are not using it right i must admit i wasnt till some very helpful techwatch fellas told me where i was going wrong

[FrInGe]

Yeah somebody need to use the search function before jumping ships.

For starters you don't even have to enter a mac in the sniffer for it to work

[sputnikk]

There's no denying that it's getting harder to find MACs that work. It might still be easy to sniff them out, but we can't use 00:14 MACs anymore - I had at least 20 of these that were 100% working until they switched them to d11

Instead of having a wide range of addresses we can use, we are now limited to Docsis1.0 MACs (most starting with 00:02) and not all of them work either.

[sr20]

Originally Posted by FrInGe

Yeah somebody need to use the search function before jumping ships.

For starters you don't even have to enter a mac in the sniffer for it to work

You won't get 00:14/00:0E due to VM 1015 FW encrypting DHCP traffic so the sniffers can't see it. 00:14/00:0E are useless anyway at the moment as they're all on d11 which requires bpi+.

Passive sniff (don't enter MAC) works fine for 00:02 / 00: D0, but then MACs will be on your own UBR so you need to trade any MACs found.

[FrInGe]

Originally Posted by sr20

You won't get 00:14/00:0E due to VM 1015 FW encrypting DHCP traffic so the sniffers can't see it. 00:14/00:0E are useless anyway at the moment as they're all on d11 which requires bpi+.

Passive sniff (don't enter MAC) works fine for 00:02 / 00: D0, but then MACs will be on your own UBR so you need to trade any MACs found.

Yeah I just swapped macs with a mate so got a wide range to try once my modem goes down.

I'm not touching something what's not broken though and this one been up for weeks

[galonki]

Originally Posted by FrInGe

I don't understand all this 'mac sniffing don't work anymore'...

I scanned last week and within minuets I had about 7 or 8 macs and not one of them being 00:14....I left it scanning for a further 20mins and end result I had about 40 macs, I'm not saying they all work cause I'm not daft enough to try them on my own UBR but I have sent them onto my mate across town to try them on his modem.

I will scan again tonight for about 20mins and see if I can pick any new ones up.

Can never have to many macs as they say!!

Hi, fringe since you are so confident that mac scanning still works in your area could you please clarify some things for me.

a). which program are you using?
b). are you brute forcing or have any other settings selected?
c). when you say after 20mins you had about 40macs do you mean macs which have config file name next to them?

please reveal more detail because you should be happy that its working for you, i cant get macs no more. in the past it was no problem for me.
and also if you have a subbed modem, put your subed mac into haxorware and go onto haxoware page and check on what docsis your mac is, because from that you can judge from docsis area you are in. my subed mac is docsis 1.1 maybe that says im in docsis 1.1 area and thats why mac scanning dont work for me.

fringe and sr20 mainly but also anyone that can help.
please reveal a bit more detail on how to scan for macs because my old techniques dont seem to work.

thank you in advance.

[sr20]

Originally Posted by galonki

Hi, fringe since you are so confident that mac scanning still works in your area could you please clarify some things for me.

a). which program are you using?
b). are you brute forcing or have any other settings selected?
c). when you say after 20mins you had about 40macs do you mean macs which have config file name next to them?

please reveal more detail because you should be happy that its working for you, i cant get macs no more. in the past it was no problem for me.
and also if you have a subbed modem, put your subed mac into haxorware and go onto haxoware page and check on what docsis your mac is, because from that you can judge from docsis area you are in. my subed mac is docsis 1.1 maybe that says im in docsis 1.1 area and thats why mac scanning dont work for me.

fringe and sr20 mainly but also anyone that can help.
please reveal a bit more detail on how to scan for macs because my old techniques dont seem to work.

thank you in advance.

Use either DHCPforce or DHCP sniffer. If you use 'sniffer, don't bruteforce.

You'll have to leave it run for several hours to get a useable number of MACs.
Every area is d11 now for 00:14/00:0E. These macs cannot be used anywhere.

[FrInGe]

Originally Posted by galonki

Hi, fringe since you are so confident that mac scanning still works in your area could you please clarify some things for me.

a). which program are you using?
b). are you brute forcing or have any other settings selected?
c). when you say after 20mins you had about 40macs do you mean macs which have config file name next to them?

please reveal more detail because you should be happy that its working for you, i cant get macs no more. in the past it was no problem for me.
and also if you have a subbed modem, put your subed mac into haxorware and go onto haxoware page and check on what docsis your mac is, because from that you can judge from docsis area you are in. my subed mac is docsis 1.1 maybe that says im in docsis 1.1 area and thats why mac scanning dont work for me.

fringe and sr20 mainly but also anyone that can help.
please reveal a bit more detail on how to scan for macs because my old techniques dont seem to work.

thank you in advance.

I'm using DHCP Sniffer-0.2.3.91b and I thought the golden rule was not to brute force? I dont brute force either way. Yes all return with configs mate.

I don't have a subbed modem (don't see the point when I can get it free) so I can answer your other questions I'm afraid mate.