Hi,

i've got a problem and was hoping someone here could help

I need to find the ip and subnetmask of a machine of wich i only know the mac adress.

I need this to find the adress of my home router after it crashed, because at the moment i am unable to locate him in the network (i've done some arp scans but didn't find it)

grtz & thx

Kater´

I'm assuming your router is a PC with a couple of ethernet cards? Are you looking for the external IP or internal IP?

I'm assuming you do not have a way of accessing the router visually? i.e. no monitor or keyboard connected? Do you have telnet or ssh working?

When you say crashed how do you know it rebooted successfully? Its internal IP should be static and you should be able to ping it.

It is not a pc, it is an Allied Telesyn cable/dsl router wich crashed (stopped all service) and was 'rebooted' by turning of and on.

On the bottom of the router is a sticker with it's mac adress, but i'm unable to find the ip (tried my and the factory settings)

The router is not 'routing' my internet connection, but is working as a hub (whitout dhcp)

grtz

Kater`

Did your router have a web-interface?
If so then I would try to do a scan for the http port (port 80) with nmap for example.
nmap -sT -P0 -p 80 0.0.0.0/0
Try this command, but be careful not to be connected to the Internet. You might end up in trouble if you start scanning the hole Internet.

yes, it does have a web interface wich is exactly why i need the ip adress ;-)

i'm going to try this immediatly !

THX !

i ran the command, but it only worked if i left the '80' out.

the result is that it said one host was found with several ports open, but 80 was not in the list...

is that 1 host just me ?

or is my router fooling around with me ?

Probably your local computer.
Check with ifconfig if it's your linux machine.

there is no ip in the output, just the 0.0.0.0 i entered

What is the model number of the router?

hmm why dont you try to use nmap 0.0.0.0/0 from your computer to the network.. i cluding the router/modem

or you can also limit down the scope... it you know something about the network... for example.. you know that.. it's ip perhaps ...202.146.x.x ... then you can try to scan ip with nmap 202.146.0.0/16

after.. your computer know.. which ip is alive.. then simply use the arp, match it... just type arp -a

wish it could help

Princenux: If you check the postings then you would see that this has been done already, with a narrowed down setting.

The router is an allied telesyn at-ar220E

more info on this router can be found on http://www.alliedtelesyn.nl/allied/p...ry=264&lang=nl

btw thx for all the replies

@ pricenux: i've scanned all i thought that could work with nmap, arp ettercap and some tools that are on the knoppix-std cd

i'd like to thank all of you for your replies

Just wondering if you have the router manual avaliable....

According to the documentation on the website the default IP address is:
192.168.1.1. The default username is root with no password. Any ideas on how the network was configured? Did you ever change the default settings?

If the routers flash memory was corrupted then according to the documentation there was a utility called First Aid Agent included with the installation CD that can restore the original settings of the router using the param.ini file.

You say its still working as a hub. I suspect that something in the router end has gone awry.

i knew about the first aid software, what is does in cases like this is replace the software on the router with the original one. Sadly, you need the ip to connect.

All i changed was the dhcp range and some ip forwarding ports.

I once had the idea of using static ip's, and turned of dhcp, but there was nothing changed since i didn't confirm the changes.

and after all, even if dhcp was turned off, the router would still have his ip, right ?

btw: sorry if my replies are a bit slow, but whithout the router getting on the net is just a bit more a drag then usually ;-)