Results 1 to 9 of 9

Thread: Ip >> MAC Address?

  1. #1
    Senior Member tampabay420's Avatar
    Join Date
    Aug 2002
    Posts
    953

    Ip >> MAC Address?

    a MAC level ethernet transmission?
    How do i get a MAC address from an IP on my network?
    I'll remove the post when answered?

    thanks a lot guys/gals- i'd appreciate it :-)
    yeah, I\'m gonna need that by friday...

  2. #2
    Senior Member Spyrus's Avatar
    Join Date
    Oct 2002
    Posts
    741
    there are a couple of different programs that let you do it. A quick search on google brought up this.....http://www.youngzsoft.net/cc-get-mac-address.htm

    I use Agilent Advisor, not free but gives you all kinds of information about a local network.

    I think this is what you are looking for. Why are you going to remove the thread?
    Duct tape.....A whole lot of Duct Tape
    Spyware/Adaware problem click
    here

  3. #3
    Hmmm...
    helpful!

  4. #4
    Antionline's Security Dude instronics's Avatar
    Join Date
    Dec 2002
    Posts
    901
    Another way would be to use a packet sniffer, and try todo a whois or ping to the target ip/hostname. In the output that the packet sniffer gives you, you can request information from the target such as the mac adress.

    Cheers.
    Ubuntu-: Means in African : "Im too dumb to use Slackware"

  5. #5
    simply ping the ip address and then check the arp entries to get its mac!
    if the machine is on a different subnet you will get the MAC of the router.
    ---------------------------------------------------------------------------------------------------------------
    ping x.x.x.x
    then use arp -a to see the arp entries

    arp/?
    ARP -s inet_addr eth_adr [if_addr]
    ARP -d inet_addr [if_addr]
    ARP -a [inet_addr] [-N if_addr]

    -a Displays current ARP entries by interrogating the current protocol data. If inet_addr is specified, the IP and Physical addresses for only the specified computer are displayed. If more than one network interface uses ARP, entries for each ARP table are displayed.
    -g Same as -a
    inet_addr Specifies an internet address.
    -N if addr Displays the ARP entries for the network interface specified by if_addr.
    -d Deletes the host specified by inet_addr.
    -s Adds the host and associates the Internet address inet_addr with the Physical address eth_addr. The Physical address is given as 6 hexadecimal bytes seperated by hyphens. The entry is permanent.
    eth_addr Specifies a physical address
    if_addr If present, this specifies the Internet address of the interface whose address translation table should be modified. If not present, the first applicable interface will be used

  6. #6
    Senior Member tampabay420's Avatar
    Join Date
    Aug 2002
    Posts
    953
    thank you all for answering my question... whie black_death had the answer i was looking for- thank you ;-)

    NBTSTAT works too, again- thanx y'all

    -take it easy :-)
    yeah, I\'m gonna need that by friday...

  7. #7
    Senior Member
    Join Date
    Nov 2002
    Posts
    186
    I think the NBTSTAT command will accomplish the same thing too.
    NBT is short for NetBIOS over TCP/IP, so you will need to have that enabled for it to work.(having it enabled is not good, unless you are behind a good firewall)

    Just use nbtstat -a [ip_addr]

    This is a good info page.
    http://www.hildrum.com/nbtstat.htm
    \"When you say best friends, it means friends forever\" Brand New
    \"Best friends means I pulled the trigger
    Best friends means you get what you deserve\" Taking Back Sunday
    Visit alastairgrant.ca

  8. #8
    Junior Member
    Join Date
    Nov 2001
    Posts
    10
    Im with algaen......

    I was under the impression that if the ip is on your own network NBTSTAT will get the MAC address
    \"I do not fear computers. I fear the lack of them.\"
    Isaac Asimov (1920 - 1992)

  9. #9
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724
    Well another way would be telneting into the router, the ip in question is behind, running a SHOW ARP ***.***.***.*** at the console.
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •