MAC anomalies

  • 3-bytes prefix of a MAC address (OUI) defines (according to IEEE) the manufacturer of the wireless card/adapter.

  • We can detect forged MAC addresses with invalid prefix

  • It is effective against Wellenreiter, not effective against more sophisticated tools (such as.FakeAP that knows all public OUI)