RE: MAC address

["Seymour, Keith E." <KESeymour () magellanhealth com>]

Although NMAP can do almost anything, one must be open to using several tools.

http://www.inetcat.org/software/nbtscan.html

If they are Windows boxes, this will perform the Net BIOS scan and will compile on Windows or Linux.

Keith 

-----Original Message-----
From: MadHat [mailto:madhat () unspecific com]
Sent: Thursday, February 26, 2004 1:27 PM
To: NMAP-DEV
Subject: Re: MAC address


On Feb 26, 2004, at 12:11 PM, testic wrote:
> As far as I am aware MAC addresses are only, or at least 
> predominantly, used
> in the ARP protocol, which is used in LAN situation. ARP packets will 
> not be
> routed over the internet. Therefore I would say that finding the MAC 
> address
> of a remote host over the internet would be very difficult.
>
> Of course, I may be wrong here :)

If it is a windows box and port 137 UDP is open (I know a lot of 
'if's), you can get the MAC from the nbtstat packet.


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org



---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to
nmap-dev-help () insecure org . List archive: http://seclists.org