Re: scan based on mac address

[Brandon Enright <bmenrigh () ucsd edu>]

You want RARP but I doubt it is well supported anymore.  If the MAC is  
on the local LAN just do a -sP for all IPs and check your ARP table  
afterwards.  If the MAC is elsewhere you could try to find it with  
NetBIOS.  You could also try to use SNMP to query all your local  
router's ARP tables for it.

For the most part though there is NO generic way to to locate the IP  
for an arbitrary MAC.

Brandon

Sent from my phone.  If you would like a digital signature for this  
email let me know and I will sign it later.


On Aug 8, 2008, at 20:08, "sara fink" <sara.fink () gmail com> wrote:

> I tried arping but I got an error. unknown host <mac address>
>
> Besides I tried to run nmap A T4 ip-range. According to nmap example  
> 15.1 in
> the output appears the mac address. Unfortunately I didn't receive  
> the mac
> address. I know the mac and want to see the relevant ip.
>
> On Fri, Aug 8, 2008 at 10:18 PM, Michael Pattrick
> <mpattrick () rhinovirus org>wrote:
>
> > On Fri, Aug 8, 2008 at 2:30 PM, sara fink <sara.fink () gmail com>  
> > wrote:
> > > Is it possible to perform a scan based on mac address only? I  
> > > don't have
> > the
> > > ip.
> >
> > The scans in Nmap are tcp, udp, and ip-protocol, all of which require
> > a destination IP. You would have to resolve that mac into an IP for
> > nmap.
> >
> >
> > Cheers,
> > Michael
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org