Re: mapping arp

From: Peter Pentchev (roam@orbitel.bg)
Date: 01/30/01


Date: Tue, 30 Jan 2001 13:09:03 +0200
From: Peter Pentchev <roam@orbitel.bg>
To: disassembled <modulus@icmp.dhs.org>

On Mon, Jan 29, 2001 at 09:14:27PM -0600, disassembled wrote:
>
> I was wondering if there was anyway i could map an mac address back
> to it's assigned IP address without using a rarpd.
>
> something i was considering writing was using writing a program
> that sent out a series of arp who-has packets to the network
> then run a cmp on the 48-bit values that returned in the
> replies against some mac address that would be supplied on the
> command line.
>
> if anyone knows anything about that & could help me out;
> i would be greatful.

<ANSWER TYPE="obvious,stupid" PRIORITY="next to useless">
If your system has already seen IP traffic from the machine in question,
you should have its address in the kernel's ARP cache. arp -an should
display it, or you could query it the way arp(1) does.
</ANSWER>

G'luck,
Peter

-- 
I am the thought you are now thinking.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message


Relevant Pages

  • mapping arp
    ... I was wondering if there was anyway i could map an mac address back ... to it's assigned IP address without using a rarpd. ... something i was considering writing was using writing a program ...
    (FreeBSD-Security)
  • Re: [SLE] ethereal
    ... ARP is "address resolution protocol". ... ethernet connections are between hardware or MAC addresses, ... address of your ethernet card -- and obviously (I hope it's obvious ... most often consisting only of your gateway. ...
    (SuSE)
  • Re: Pure IP & ARP broadcasts
    ... It actually communicates via the MAC address of the Nics (aka Layer2 ... what the ARP request does. ... A host has a packet to send, it has the IP# and nothing else. ... But if the owner of the IP# is not on that segment then the Router replies ...
    (microsoft.public.windows.server.networking)
  • Re: [SLE] ethereal
    ... > to directly actually need to know the MAC ... > will respond with an ARP Reply giving your MAC address. ... > most often consisting only of your gateway. ... > minute of the day the gateway knows what ethernet card is using those ...
    (SuSE)
  • RE: general sniffer question
    ... Subject: general sniffer question ... It is possible that what you saw was ARP broadcasts, ... communication protocol, they need the MAC address of each card, an ip ... > other peoples packets that are not broadcast packets. ...
    (Security-Basics)

Quantcast