Quote:
Originally Posted by Tanlith
OK here's how they can know if you are running multiple clients:
Every network card (all of them) have a completely unique number known as a MAC address (nothing to do with the Macintosh PC... you'd be surprised how many people think that)
The MAC address is masked as your IP address when doing stuff online
So even though you are running multiple instences of the same program (with different names) your IP address is the same on oll of them... and more importantly so is the MAC address
So to sum up: 1 PC with 3 clients generate all data packets sent with the SAME MAC address
2 or more PCs on a network send data packets with multiple MAC addresses since each PC has it's own.
When cheking the server logs on suspected multicienters... that's what they would be looking for.
- Tanlith -
|
You're so wrong with what you said.. but that's what the most people think, heres how it really goes.
Yes, the MAC address is sent with TCP/IP packets, but not with the IP header, the MAC header comes
before the IP header not in plain-text unlike the IP header the MAC address comes in heximal values.
The IP-header doesn't change, however the MAC header changes constantly.
At every router / switch / server the MAC header changes, the source MAC becomes the addess of the router where it came from, and the destination MAC the address where it goes to.
This means that the MAC address in the MAC header will be the one of your router, but not only that, for example at my Internet Service Provider, it goes through 10 servers first ( which is completely normal ), and then obviously it goes through some servers of them, at the end really the only way to see where the packet comes from is the sender IP, and if not you would only have the router MAC which is always the same.
Here's what they do (if they even bother doing it), they make a long string of hardware with things like the serial- number of your HDD and then hash it.
For example purposes lets say the serial- number of your HDD is 151313, and your CPU is 2.1ghz and you have 3gb of ram. They would do something like:
hash("hd:151313;cpu:2.1;ram:3;");
They perform this locally (obviously) and then they simply send the hash to their server and compare.
You can type
tracert *.*.*.* in cmd (where * is a wildcard, should be an ip obviously), and you will see that the first hop is your router's gateway, thats where your MAC header changes for the first time.
Hope you learned something, greetz from pwfreaks.com!
