Implementation of timeout on new MAC discovery

Mirekmal
Mirekmal Member, Beta Tester Posts: 68
10 Comments 25 Likes First Anniversary 5 Awesomes
✭✭✭
Since many virtualization platform assign random MAC address to virtual machins on startup, it creates lots of false alarms due to these MACs being detected on LAN and then immediatelly vanishing from network. It is the case even if machines are configured with static MAC addresses. I experienced this in ESXi and even running Windows in Bootcamp on Mac. Other users reported similar case in MS SCVMM also.
Would it be possible to implement configurable timeout after which newly discovered MAC address raises alarm, if still present on network? This way MAC addresses that are in range for less that a ~minute could be discareded and only these that are 'more permanent' would trigger alarm. Obviously such MACs should be by default blocked for security.
Tagged:
0
0 votes

Active · Last Updated

Comments

  • VioletChepil
    VioletChepil London, UKMember Posts: 2,471
    100 Answers 500 Likes 1000 Comments 100 Agrees
    ✭✭✭✭✭✭
    Just turning this one into an ideas thread so others can vote. Cast your vote if you'd like to see implemented too.

    Community Manager at Fing