Web Hosting Talk







View Full Version : mac address


clocker1996
05-11-2002, 06:33 PM
is it true that you can use the arp command and get ANY ips mac address?

Ive never heard of this.
can someone enlighten me.

also, if it is possible, can someone show me an example?

webx
05-12-2002, 04:22 AM
Yes, you can use

# arp -a

to see the mac addresses your computer has seen lately. these mac addresses are from your LAN.

:cool:

clocker1996
05-12-2002, 12:33 PM
that isn't what i'm asking

ii'm asking about getting the mac address of other computers.

webx
05-12-2002, 01:23 PM
I'm not sure what do you mean by other computers?

Try

# ping other_computer_ip_on_lan :)
# arp -a

and see what's there?

clocker1996
05-12-2002, 01:42 PM
.........................

bofh
05-12-2002, 02:08 PM
Originally posted by clocker1996
is it true that you can use the arp command and get ANY ips mac address?

Ive never heard of this.
can someone enlighten me.

also, if it is possible, can someone show me an example?

Yes and to the best of my knowledge you'll need access to the switch/router on the LAN where the host resides to get the MAC.

clocker1996
05-12-2002, 02:12 PM
finally
someone that knows something :)

thanks bofh

The Laughing Cow
05-12-2002, 03:38 PM
ARP - Address Resolution Protocol, It finds out a MAC address from an IP address. Now I do not know what the situation with supporting this on Operating systems but it is a router command which will show the ARP table.

Consequently you have RARP which is the reverse of the above.

webx
05-12-2002, 04:42 PM
clocker1996: Did I say something else? :rolleyes:

You can only see the mac addresses of the computers on your LAN. and to be able to see any mac address, you MUST first try to talk to other computer to get the mac address back thru arp.

The Laughing Cow,

Without arp none of the "operating system" can talk to any other computer. the router arp command shows the arp table which is populated by arp (the protocol) so that each time router has to talk to another computer, it does not need to do arp again and again and again. same is the case with any operating system.

Try this on Windows:

c:\>arp -a :D

Bingo!

As a matter of fact, if you are clever enough you can "watch" all of the traffic on your LAN computers ;) each byte on your LAN is available on your ethernet card! :eek:

WII-Aaron
05-12-2002, 04:52 PM
Okay... Here you go...

Local ARP commands can only be used to discover mac addresses of machines on your local network.

RARP, or Reverse ARP, is not the opposite of the above. Actually it's a protocol used by diskless workstations to assign an IP address based on the mac address of thier network card. It's not used for resolution.

The process used to discover a remote mac is actually an SNMP function and the machine has to be vulnerable to it. The easiest way to do this, without going into massive technical detail is to get a tool like LANguard or Solar Winds and use those. Not all machines will give you thier mac address though. It's kind of a hit and miss.

Good Luck.

Aaron

Shyne
05-12-2002, 05:27 PM
Originally posted by clocker1996
finally
someone that knows something :)

thanks bofh

Show some respect for people who help you. Maybe you should RTFM before you ask.

clocker1996
05-12-2002, 05:53 PM
hey, didnt you say you were leaving wht because it was bought out by wht?

why are you still here?

The Laughing Cow
05-12-2002, 07:09 PM
Masood,

I was sure that ARP would be used somewhere in the operating system but was unaware that there was a command to show ARP in Windows/Linux etc. Thanks for clearing that up.


WII-Aaron,

From what I was told during my certification as a CISCO certified network associate and as a student in a CISCO academy, Rarp is used to resolve a Layer 3 address from a Layer 2 address. i.e IP from MAC. In addition to this I do remember something about booting diskless workstations coming up too like you said.

As far as CISCO are concerned and common networking questioning is around the fact that RARP resolves IP from MAC.

Then there is all that unrelated inverse stuff.

Shyne
05-12-2002, 07:25 PM
Originally posted by clocker1996
hey, didnt you say you were leaving wht because it was bought out by wht?

why are you still here?

WHT bought WHT? That's something new.

If you can't respect the idea that other people ACTUALLY want to help you, then maybe you shouldn't post the question that you were too lazy to look up before posting.

clocker1996
05-12-2002, 08:00 PM
ok WOW
a typo

RACKSHACK BOUGHT WHT

you know exactly what I meant, so whatever.

clocker1996
05-12-2002, 08:03 PM
Originally posted by Shyne
you were too lazy to look up before posting.

Really? Take your own advice.

http://www.webhostingtalk.com/showthread.php?s=&threadid=43385

webx
05-12-2002, 08:13 PM
Calm down. ceasefire.

Have peace!

:blush:

rbuecker
05-12-2002, 10:15 PM
Someone correct me if I am wrong, but arp will not show you the mac address of any computer on the internet from YOUR location.
What you will get if you ping another system outside of your network (beyond your router) is the mac address of your router (I do not necessarily mean those wonderful linksys/netgear/etc devices). In order to get the MAC of a system on a network outside of yours, there are a few simple steps you can do:

1. Find the country/location of the other network
2. Go to www.expedia.com and reserve a flight
3. Take your laptop to the airport and head on over
4. Plug into their network (you may need to ask)
5. Ping, then arp

Or you could perhaps try to find a way and dial in to that network.

Just a few ideas :stickout

webx
05-12-2002, 10:39 PM
Robert,

You are right. There is another neat idea:

1. Purchase a dedicated server in the target network LAN (the target machine must be in your subnet)
2. Ping your target machine
3. Get the mac address

:stickout

Now the real question should be, what can you do with mac address? even if you get it? what was the real concern?

I'm looking at about 50 mac addresses on some network :) what can I do now? :eek:

Shyne
05-12-2002, 11:48 PM
clocker1996,

Did you even read MY the post? Obviously not. There's a difference between trying to solve something and just being a lazy ass and asking someone else.

clocker1996
05-13-2002, 12:41 AM
yeah of course i read it

and all you had to do was goto apache.org and look up how to use <Directory>

e.g.
<Directory /usr/local/bandmin/htdocs>
Options All
AllowOverride None
</Directory>