Skip to content

Find and change (spoof) your MAC address in Windows XP

windows logoThis paper presents network tools that allow you to find and change your mac address.

A MAC address is a unique 48-bit hexadecimal identifier assigned by a manufacturer to a networking device such as a network card when it is manufactured. First six numbers a MAC address comprise the Organizational Unique Identifier and are assigned by the IEEE, the last six numbers represent the interface serial number. MAC addresses are usually written as six groups of characters; normally they look something like 00:D0:D7:10:5B:84 or 00-D0-D7-10-5B-84.

Find MAC address from command line

Use ipconfig /all command

Utility ipconfig allows you to view network configuration information. Ipconfig shows your IP address, MAC address and other information.

ipconfig [/? | /all | /renew [adapter] | /release [adapter] |
/flushdns | /displaydns | /registerdns |
/showclassid adapter |
/setclassid adapter [classid] ]

adapter         Connection name
(wildcard characters * and ? allowed, see examples)

/?           Display this help message
/all         Display full configuration information.
/release     Release the IP address for the specified adapter.
/renew       Renew the IP address for the specified adapter.
/flushdns    Purges the DNS Resolver cache.
/registerdns Refreshes all DHCP leases and re-registers DNS names
/displaydns  Display the contents of the DNS Resolver Cache.
/showclassid Displays all the dhcp class IDs allowed for adapter.
/setclassid  Modifies the dhcp class id.

The default is to display only the IP address, subnet mask and
default gateway for each adapter bound to TCP/IP.

For Release and Renew, if no adapter name is specified, then the IP address
leases for all adapters bound to TCP/IP will be released or renewed.

For Setclassid, if no ClassId is specified, then the ClassId is removed.

> ipconfig                   ... Show information.
> ipconfig /all              ... Show detailed information
> ipconfig /renew            ... renew all adapters
> ipconfig /renew EL*        ... renew any connection that has its
name starting with EL
> ipconfig /release *Con*    ... release all matching connections,
eg. "Local Area Connection 1" or
"Local Area Connection 2"

Result of using ipconfig /all shows the mac addresses. You should see something similar to the output below.


Use net config rdr command

The net config rdr command provides the following results:

net config rdr
Computer name LANTOOLBOX
Full Computer name lantoolbox
User name Administrator

Workstation active on
NetbiosSmb (000000000000)
NetBT_Tcpip_{A3135CB3-918A-48E3-A820-009CB2EE7593} (00D0D7105B84)

Software version Windows 2002

Workstation domain WORKGROUP
Workstation Domain DNS Name (null)
Logon domain LANTOOLBOX

COM Open Timeout (sec) 0
COM Send Count (byte) 16
COM Send Timeout (msec) 250
The command completed successfully.

Use getmac command

Windows XP has a getmac utility that will allow you to view the MAC address.

To use the getmac command:

GETMAC [/S system [/U username [/P [password]]]] [/FO format] [/NH] [/V]

This command line tool enables an administrator to display the MAC
address for one or more network adapters on a system.

Parameter List:
/S system Specifies the remote system to connect to.

/U [domain]user Specifies the user context under
which the command should execute.

/P [password] Specifies the password for the given
user context. Prompts for input if omitted.

/FO format Specifies the format in which the output
is to be displayed.
Valid values: "TABLE", "LIST", "CSV".

/V Specifies that the detailed information
should be displayed in the output.

/NH Specifies that the "Column Header" should
not be displayed in the output.
Valid only for TABLE and CSV formats.

/? Displays this help/usage.

GETMAC /S system /NH /V
GETMAC /S system /U user
GETMAC /S system /U domainuser /P password /FO list /V
GETMAC /S system /U domainuser /P password /FO table /NH

Result of using getmac shows the mac addresses

getmac mac address viewer

Find MAC address from GUI


Use Lanspy to find the MAC address remote computer and and network hardware manufacturer

LanSpy is a set of network utilities brought together in a single program with simple and easy-to-use interface.

View mac address from lanspy

Download LanSpy

Change (spoof) MAC Address from command line

You can change your mac address for security reasons or for any other reasons. These programs will help you.


EtherChange can change the Ethernet address of the network adapters in Windows.


Note: After changing mac address disable and then enable again the adapter using Control Panel.

Download EtherChange



Macshift v1.1, MAC Changing Utility by Nathan True,

Usage: macshift [options] [mac-address]

-i [adapter-name]     The adapter name from Network Connections.
-r                    Uses a random MAC address. This is the default.
-d                    Restores the original MAC address.
--help                Shows this screen.

Macshift uses special undocumented functions in the Windows COM Interface that
allow you to change an adapter's MAC address without needing to restart.
When you change a MAC address, all your connections are closed automatically
and your adapter is reset.

Example usage:

macshift -i “Wireless Network Connection” 002334564775
This would change your wireless MAC to the one above. Your adapter will be disconnected and reset immediately.

macshift -i “Wireless Network Connection” -d
This would restore your MAC address.

Download Macshift

Change (spoof) MAC Address from GUI

Mac MakeUp


  1. Select the adapter
  2. Type a new MAC or delete a current one
  3. Disable/enable the adapter

Example command line usage:

macmakeup.exe <count | <set | SET> <interface> <new_mac | random> | clear <interface> [quiet]

enum: get a list of all the interfaces

set <interface> <mac>: sets <mac> on interface number <interface>

Example: macmakeup.exe set 4 010203040506

If you use ‘random’ Mac Makeup will generate a random mac address.

If you use ‘SET’ the interface will be disabled and reenabled to make the mac change effective.

clear <interface>: reset back to original mac address interface number <interface>

Example: macmakeup clear 4

quiet: optional parameter that sets the output mode to quiet.

Download Mac MakeUp

Technitium MAC Address Changer


Technitium MAC Address Changer allows you to change MAC Address of your Network adapter. It has a very simple user interface. Technitium MAC Address Changer can set a new MAC address to your Network adapter.

Download Technitium MAC Address Changer

Related online resource about MAC addresses

Vendor/Ethernet MAC Address Lookup and Search

Related posts:

  1. 112 Windows run commands
  2. Configuring network settings from command line
  3. Performing Networking Tasks: Managing DHCP from PowerShell
  4. Networking Command-line Utilities
  5. Configure Windows Firewall using command line

Posted in Articles, Networking Tools.

SEO Powered by Platinum SEO from Techblissonline