DHCP Sniffer Tutorial

DHCP Sniffer Software written by Solster

Special Thanks to Wizardmods & Digital World

Tutorial by Termin8tor
 Table of Contents
Step 2--------------------------------------------------------------------------------------------------------------------------------------------------------------------- 3
Figure 1.....................................................................................................................................................................................................................3
Step 3--------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4
Figure 2.....................................................................................................................................................................................................................4
Step 4--------------------------------------------------------------------------------------------------------------------------------------------------------------------- 5
Figure 3.....................................................................................................................................................................................................................5
Step 5--------------------------------------------------------------------------------------------------------------------------------------------------------------------- 5
Figure 4.....................................................................................................................................................................................................................5
Step 6--------------------------------------------------------------------------------------------------------------------------------------------------------------------- 6
Figure 5.....................................................................................................................................................................................................................6
Step 1 - Introduction
This tutorial will provide you with the means to get a list of MAC addresses for use on cable modems. This eliminates the need to
trade MAC addresses with anyone else as all MAC addresses acquired using this technique will work on your UBR.
First of all for this tutorial you will need DHCP Sniffer version 0.2.3.91b or later.
For convenience I have included Solsters DHCP Sniffer with this tutorial. You will also need to plug your cable modem directly into
your P.C via RJ45 (Ethernet). A router cannot be used as it will not function correctly.

Step 2
Launch DHCP Sniffer. You will be presented with a screen that looks like the one shown in the figure 1 below.

Figure 1

Now it is best to leave DHCP Sniffer running for several minutes until you have some entries within the main window area. Once
you have some entries move on to step 3.
Step 3
Hopefully there will now be some entries in the main window area. The entries should have a Physical Address, Bootfile, Address,
Subnet & Gateway. See Figure 2 for reference.

Figure 2

In Figure 2, observe that in the main window area there are columns for a Mac Address, Bootfile, Address, Subnet and a Gateway.
We are looking for entries within here to continue to Step 4.
Step 4
Left click on the first Entry. The Physical Address of the first entry is now contained in the data entry box next to “Discover”.

Now click on the arrow pointing down located to the immediate right of the “Save” button and make sure that “Include bootfile” is
selected by making sure there is a little tick selected next to it.

See Figure 3 Below for reference.

Figure 3

Physical Address

Step 5
Left click on the little arrow pointing down to the immediate right of the “Discover” button. In the popup box make sure that
“Bruteforce” is selected and then click on the “Discover” button. For reference see Figure 4 below.

Figure 4
Step 6
Having completed Step 5, you should find that your list is now populated by a small collection of MAC addresses. All of these can
be used on your modem to gain access to the network.
The best Mac Addresses to force will usually have cmreg-ntlhmxxx-rts22.cm. It is recommended to repeat Step 2 onwards and
gather as many cmreg-ntlhmXXX-rts22.cm Mac addresses as possible as these use a config file that allows the fastest docsis 2 tier
of service. Even if your area has config file encryption this method will still allow you to gain the fastest Docsis 2 tier currently
available without the need to force a faster config on your modem.

Figure 5

Use this MAC address as your HFC MAC on your modem as it allows the 20mbit tier on your modem. Note the cmreg-ntlhmXXX-
rts22.cm Bootfile next to the MAC. Note that all of these MAC addresses will allow your modem access to the network.