Re: IP to MAC mapping

[Jon <warchild () spoofed org>]

On Wed, Nov 20, 2002 at 06:49:47PM +0100, Johan Denoyer wrote:
> Hi,
>
> we are currently looking into illegal usage of a protected network. We are
> managing a class C network, and we would like to be able to detect illegal
> usage of the network by finding the MAC address of the ip address used and
> then checking it against a database.
>
> Now I would like to find a software or a perl scrip that would do the work.
> (The budget that we have is 0$, so freeware is likely to be the solution)
>
> I have tried doing searches using google without any luck. If anyone uses
> such software, please tell me which one, and where I can find it.

Arpwatch and arpping would be my suggestion:

ftp://ftp.ee.lbl.gov/arpwatch.tar.gz
http://ftp.cerias.purdue.edu/pub/tools/unix/netutils/arping/arping-1.04.tar.gz