MAC address 02:42:AC:xx:xx:xx

Docker-Compatible Prefix (02:42) LEGACY DOCKER PATTERN

No IEEE assignment is found for this MAC: 02:42:AC:xx:xx:xx. Its U/L bit marks it as locally administered, rather than an IEEE hardware vendor assignment.

This prefix matches Docker's legacy IPv4-derived bridge MAC scheme, but does not prove that Docker generated this address.

Locally Administered Addresses (LAA)

A locally administered address was assigned locally rather than by the IEEE: the second-least-significant bit of its first octet is 1, which makes the second hexadecimal digit of a unicast address a 2, 6, A or E, or 3, 7, B or F for a multicast address. MAC randomization and manually assigned addresses both produce this form.

How Docker Generates This MAC (Embedded IPv4)

Docker's legacy bridge scheme prepended 02:42 to the container's IPv4 address, encoded in the last four octets. For example, 0xAC = 172 and 0x11 = 17.

0xAC = 172
0x11 = 17
0x00 = 0
0x02 = 2

Candidate embedded IPv4: 172.17.0.2

This is a decoding of the legacy pattern, not a verified current IP address.

Docker Engine 28 switched bridge interfaces to randomly generated MAC addresses. Other tools or operating systems can also generate the 02:42 prefix.

Docker Engine 28 networking changes

Octet 0 Structure & Docker Bit Architecture

First Octet: 0x02 = 00000010₂
BIT 7 (MSB) ← DOCKER OCTET 0 (0x02) → BIT 0 (LSB)
b7 0 b7
b6 0 b6
b5 0 b5
b4 0 b4
b3 0 b3
b2 0 b2
U/L 1 Bit 1
I/G 0 Bit 0
1
Bit 1 (U/L) = 1 → Locally Administered (LAA)

Allows Docker daemon to generate virtual MACs without IEEE registration collisions.

0
Bit 0 (I/G) = 0 → Unicast

Direct point-to-point veth container delivery.