Re: Locating devices on a network

From: Kath (kath@kathweb.net)
Date: 09/24/01


Message-ID: <016001c144e6$4de67400$82e53181@resnet.sunysb.edu>
From: "Kath" <kath@kathweb.net>
To: "News" <news@gep.pt>, <SECURITY-BASICS@securityfocus.com>
Subject: Re: Locating devices on a network
Date: Mon, 24 Sep 2001 06:47:22 -0400

MAC addresses is the only other kind of address and that is only used in
layer 2 switching (Switches and such) and as an absolute ID for something on
a network (comes in handy in finding out who stole your static IP).

ARP tables record MACs, put only as MAC addresses vs their corresponding IP
addresses, IIRC from Crisco class.

- k

----- Original Message -----
From: "News" <news@gep.pt>
To: <SECURITY-BASICS@securityfocus.com>
Sent: Friday, September 21, 2001 12:45 PM
Subject: RE: Locating devices on a network

> Following this issue, what if one don't know the ip address of a device?
> Suppose it's using a different network id.
>
> How to detect it?
>
>
> GeP
>
>
> -----Original Message-----
> From: Steve Micallef [mailto:stevenm@ot.com.au]
> Sent: quinta-feira, 20 de Setembro de 2001 23:52
> To: Nils Kristian Kristiansen
> Cc: SECURITY-BASICS@securityfocus.com
> Subject: Re: Locating devices on a network
>
>
> Hi Nils,
>
> The solution to this problem can vary, as it depends greatly on network
> size and complexity.
>
> Generally however, it's IP address should be somewhat indicative of what
> LAN segment it's connected to. Get onto a machine on that same LAN segment
> and ping the device. The machine should then have the MAC address of the
> device in it's ARP cache, which you can display by doing an arp -a (this
> works on *nix and NT).
>
> Once you have the MAC address, telnet to the switch. The switch should
> then show you what device (by MAC address) is on each port.
>
> Hope this helps.
>
> Regards,
>
> Steve Micallef
>
> On Wed, 19 Sep 2001, Nils Kristian Kristiansen wrote:
>
> > Hello all!
> > I would like to know how to locate a device on my network.
> > The only thing I know is the IP-address, and I would really like to know
> > what switch and portnumber the device is connected to.
> >
> > Thanks!
> >
> > Best regards
> > Nils Kristiansen
> >
> >
>
>



Relevant Pages

  • Re: Media Sharing no longer working with gigabit switch?
    ... The switch is strictly a passive device, ... Other than that - it's worth testing the network properties of each PC ... Did you use MAC Clone feature or re-assign the ... and other programs that need ports opened to work ...
    (microsoft.public.windowsmedia.player)
  • RE: ARP Spoof Question
    ... Hardware MAC addresses are supposed to be globally unique. ... If you have duplicate MAC addresses on a shared-media network, ... > spoofed ARP packets to receive packets but have been unable to locate ... > my switch table. ...
    (Security-Basics)
  • Re: MAC address spoofing - conflict?
    ... Ethernet switches split ethernet networks into different collision ... MAC spoofing should not be applicable to thoses environments as it ... Depending on switch behaviour, you may ... WiFi network, as it is a layer 1 share medium too. ...
    (Pen-Test)
  • Re: Media Sharing no longer working with gigabit switch?
    ... strange that its only affecting the media sharing and nothing else. ... switch in its place everything worked as expected except for the media ... an appropriate port (this is controlled by the MAC address of each ... Other than that - it's worth testing the network properties of each PC ...
    (microsoft.public.windowsmedia.player)
  • Re: "Network from Two Diferent LAN?"
    ... "Network from Two Diferent LAN?" ... nd extentions from LAN and LAN...how to network two diferent accounts on two ... Firewalls and Network Load BalancingHow can each NIC register a different bogus MAC address on each switch port and still listen on a common NLB array MAC address? ...
    (microsoft.public.windows.server.networking)