Re: Getting an IP address from a MAC address

From: Dana Epp (dana_at_vulscan.com)
Date: 07/02/03

  • Next message: Tim Greer: "Re: Ten least secure programs" 
    To: <security-basics@securityfocus.com>, <Steven_Paice@cityofperth.wa.gov.au>
Date: Wed, 2 Jul 2003 10:06:03 -0700

    Have you considered using arp and simply checking your arp tables?

    If you are on the same net, you can do a single ping to the broadcast to get
    every card to respond, and then do something like:

    arp -a | grep <mac>

    Where <mac> is the MAC addr you are looking for. Note that on windows each
    octet is separated by a dash, and on most unix' its a colon.

    ie (using an example of a 192.168.1.0 class C block):

    Windows:
    ping -n 1 192.168.1.255
    arp -a | grep 00-00-00-00-00-00

    Unix:
    ping -c 1 192.168.1.255
    arp -a | grep 00:00:00:00:00:00

    You might want to put a delay/sleep in there after the ping to give the
    network chatter enough time to respond. Otherwise that will do what you
    want.

    Good luck. 

    ---
Regards,
Dana M. Epp
----- Original Message ----- 
From: <Steven_Paice@cityofperth.wa.gov.au>
To: <security-basics@securityfocus.com>
Sent: Monday, June 30, 2003 10:54 PM
Subject: Getting an IP address from a MAC address
> Hi all,
>
> I was wondering if anyone knows of a tool which can determine an IP
address
> from a MAC address???
> I have found plenty of tools which will work the other way, but nothing
for
> what I am after.
>
> Thanks in advance
> Steven P
>
>
> --------------------------------------------------------------------------
-
> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
> The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> while InStat has confirmed Neoteris as the leader in marketshare.
>
> Find out why, and see how you can get plug-n-play secure remote access in
> about an hour, with no client, server changes, or ongoing maintenance.
>
> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> --------------------------------------------------------------------------
--
>
---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------
  • Next message: Tim Greer: "Re: Ten least secure programs"

    Relevant Pages

    • Re: Getting an IP address from a MAC address
      ... and IP addresses to MACs (ARP). ... You can also run a sniffer on your box to see if the MAC shows up in any ... > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ... > about an hour, with no client, server changes, or ongoing maintenance. ...
      (Security-Basics)
    • Re: Getting an IP address from a MAC address
      ... If you are on the same subnet, you can use the arp table on your local computer ... to assign the MAC address an IP address. ... > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ...
      (Security-Basics)
    • Re: Getting an IP address from a MAC address
      ... you have to take into account that your knowledge about MAC ... If you are on the same net, you can do a single ping to the broadcast to ... > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ... and see how you can get plug-n-play secure remote access in ...
      (Security-Basics)
    • Re: Translate MAC address to IP address
      ... >> I have some MAC addresses from a local Ethernet segment. ... a broadcast ping to the specified MAC address (not to the broadcast ... This causes an ARP exchange for any such address not ...
      (freebsd-net)
    • Re: Problem with Bridging ... and bge devices under FreeBSD 7.x?
      ... while arp -a also shows the 52:54 MAC, although MACs for the ifconfig -a are, ... Can you ping from A to C? ...
      (freebsd-net)