Reply to post: Re: Am i being thick...

Wanted – have you seen this MAC address: f8:e0:79:af:57:eb? German cops appeal for logs in bomb probe

JetSetJim Silver badge

Re: Am i being thick...

Perhaps the IP used for the email (and visible in the headers) was traceable (via the ISP) to a router/hub/access point that kept a record of sessions - e.g. commercial Cisco wifi APs will keep records for each device containing MAC address, authentication method, #packets/bytes shipped in each direction, start time and duration (pinch of salt on that one as there's no explicit disconnect in wifi), so all they need to do is get a judge to sign off on a legal "search" of the router to get the logs from it, which are available through a standard API with the appropriate credentials (which no doubt the operator holds).

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

SUBSCRIBE TO OUR WEEKLY TECH NEWSLETTER

Biting the hand that feeds IT © 1998–2020