Strange MAC Addresses

Hello folks
Does anyone know what vendor/manufacturer/equipment type the MAC address prefixes 00:29:00 and 00:24:00 relate to? They don't appear in the official registers

Could this be some kind of "virtual" mac address? Is this coming from a Linux system, by the way?

Could this be some kind of "virtual" mac address? Is this coming from a Linux system, by the way?

Those were my exact thoughts as well ...

I agree it is probably some sort of virtual MAC address. I wish I did know where it was coming from. I think the only way I'm going to track this down is to get my hands dirty and arrange some downtime for packet sniffing. Just thought (hoped?) someone might have come across it before

Where are you seeing said MAC?

in the logs of a firewall which alleges that it is seeing packets with varying IP addresses but always one or other of these MAC addresses. Odd thing is that the firewall has several interfaces and these symptoms appear on two of them, supposedly coming from two completely separate networks with no common devices. The vendors say it must be real traffic but the sniffer doesn't see it...