LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 06-30-2004, 02:09 AM   #1
TheSpork
Member
 
Registered: May 2003
Location: Norway
Distribution: Ubuntu / Debian
Posts: 40

Rep: Reputation: 15
Is it possible to find an IP address from a MAC-adress?


I'm partly managing a switched network (a _large_ one) where some ahole has brought blaster into our network. 99% of the hosts are patched, but some computers have been set up for testing, and the admins haven't patched them. We've set up a fake route to a local windowsupdate.com, and from this host, we can discover the mac-address of the host infected. The problem is that blaster is spoofing ip-addresses, and I'm wondering if there is a way to find the real ip-address. The network is covering a large area geographically, and the whole network is a switched WAN..

Am I in deep trouble (well.. Only one host infected for now), or is it possible to trace the address? I've tried arping1 <mac-address>, but I don't get a respond..

Any good ideas, or any suggestion of something I might have missed?
 
Old 06-30-2004, 02:48 AM   #2
Thoreau
Senior Member
 
Registered: May 2003
Location: /var/log/cabin
Distribution: All
Posts: 1,167

Rep: Reputation: 45
arp table

If you are on a managed switched network, then you can lookup the arp table log on the switch/router to get the port number/ip. If you are on an unmanaged switched network, then you have no tracking via that switch/router and need to arp the live client connection in question.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to find an IP address from the MAC address of a remote machine ? jitz Linux - General 3 01-03-2006 07:55 AM
How to find IP address of a machine if I know their MAC Address dysenteryduke Linux - Networking 13 09-12-2005 10:21 AM
How to find MAC address of a specified IP address ? longtongfish Programming 1 07-12-2005 03:26 PM
how can i find mac address compzoo Linux - Networking 3 02-03-2005 02:02 PM
how to find IP if I have MAC address bojo Linux - Networking 3 11-29-2003 10:10 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 02:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration