Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
/sbin/arp -a
is that what you are looking for? Note that you will only see MAC addresses of systems on your local network, since MAC addresses aren't used across IP subnets. You also may not see many MAC addresses if you are on a switched port, since only broadcasts and traffic destined for your system will come through.
Logging MAC addresses is not very useful, it's more useful to attached MAC addresses to a switch port to stop muppets messing around with your cables.
MAC addresses are part of layer 2 and need to be translated via ARP to IP addresses.
If you have routed connections into your lan (which im sure you do) at layer 3 then MAC are not important as only the routers will use them.
MAC addresses are cached for 3 mins or so an ARP -a will only show you some of the recent address that your system wanted to resolve. i.e other broadcast systems etc... if you want to find each systems MAC address you'll need to do a ping sweep of the subnet then see the results from TCPdump or ethereal. the IP part of TCPIP will have to inculde it.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.