SUMMARY: Finding a host on the network using the MAC address

From: Schoen,Timothy (timothy.schoen@baesystems.com)
Date: Wed Sep 27 2000 - 20:59:42 CDT


!. Ping the broadcast address then use arp -a
# ping 255.255.255.255
# arp -a | grep "xx:xx:xx:xx:xx:xx"

2. Use "snoop" to capture packets based on the MAC address...
# snoop ether host xx:xx:xx:xx:xx:xx

3. If you've got an intelligent network devices (switches), you can
interrogate each one to see if it's got a device with that MAC address on a
local (physically attached) port. On a Cisco switch, use enable, then do
show mac-address-table, and it'll show you the mac address and which port
it's on, then you can trace back the cable from the switch port to the
machine.

4. kevin graham sent a short script which also accomplished the task

foo:
#!/bin/sh
ping 255.255.255.255
macaddr=`echo $1 | sed -e 's/:\([0-9a-f]\):/:0\1:/g' -e
's/^\([0-9a-f]:\)/0\1/' -e 's/:\([0-9a-f]\)$/:0\1/'`
netstat -np | sed -n '/'$macaddr'$/p' | awk '{print $2}'

then run ./foo "8:0:20:ae:45:12"

S
U BEFORE POSTING please READ the FAQ located at
N ftp://ftp.cs.toronto.edu/pub/jdd/sun-managers/faq
. and the list POLICY statement located at
M ftp://ftp.cs.toronto.edu/pub/jdd/sun-managers/policy
A To submit questions/summaries to this list send your email message to:
N sun-managers@sunmanagers.ececs.uc.edu
A To unsubscribe from this list please send an email message to:
G majordomo@sunmanagers.ececs.uc.edu
E and in the BODY type:
R unsubscribe sun-managers
S Or
. unsubscribe sun-managers original@subscription.address
L To view an archive of this list please visit:
I http://www.latech.edu/sunman.html
S
T



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:14:18 CDT