Printable View
I am trying to find what is on the other end of a couple of wildly run CAT5 cables. They are plugged into a CISCO 4006 and instead of just unplugging them and waiting to hear who complains. I wanted to know if anyone could help me. From within the a terminal session I could get the MAC address of what is on the other end but does anyone know of a way that I could relate that to an ip address. Is there some sort of reverse arp lookup command or program?
Thanks in advance....
Gixxer, you can look up who the mac address was issued to here
http://coffer.com/mac_find/
or a million other places
http://www.google.com/search?hl=en&i...address+lookup
as to working out an ip address ??? not sure sorry :(
display the routers arp table:
show arp
If you have a machine plugged into the same network as the devices in question (for the sake of demonstration say you are on a subnetted 192.168.10 net with a /24 netmask)
(This may or may not work depending on your setup)
ping 192.168.10.255 (ping your broadcast)
This should make every computer on your network respond with a echo reply.
Then type: arp -a (depends on OS, but will need a unix or a Win NT/2k/XP) to print your arp table, look for the MAC address, it should have its IP pairing...I am assuming from that point you would be able to figure itt out...
/nebulus
PS Potential problem: They have a personal firewall and/or block replies to pings, in which case, you will have to use a few other arp style games, but I think this will be enough to point you in the right direction.
If you are on a Windows, you can use nbtstat
I use nbtstat -a 192.168.0.x
change the address to fit your network ip scheme.
NetBIOS Remote Machine Name Table
Name Type Status
---------------------------------------------
W-262-05 <00> UNIQUE Registered
WORKGROUP <00> GROUP Registered
W-262-05 <03> UNIQUE Registered
W-262-05 <20> UNIQUE Registered
WORKGROUP <1E> GROUP Registered
MAC Address = 00-10-5A-E7-C5-2C
just to elaborate on tedobs post
Log into the router, run
s arp 216.40.224.2 (if you have the IP). That will display the arp table...
IP Address MAC Address Type Age Port
1 216.40.224.2 0010.e005.0360 Dynamic 8 12
Reverse arp only works if you already know the MAC. It gives you all the Ip's associated with that mac.
s arp ma 0010.e005.0360
IP Address MAC Address Type Age Port
1 216.40.224.2 0010.e005.0360 Dynamic 0 1
2 216.40.224.1 0010.e005.0360 Dynamic 0 1
Thanks guys. I jumped into the gateway router and did a "show arp". That seemed to work for most of the mac's that I needed to lookup. However, some of the mac addresses did not appear in the gateways table. For example, one unmarked line goes into the Catalyst 4006 on port 20. From within the 4006, I did a "show cam dynamic 5/20". This came back with two mac addresses that are assosiated with it. Neither of them are in our gateway's arp table. Can anyone explain?