Ethereal-users: RE: [Ethereal-users] RE: Ethereal-users digest, Vol 1 #541 - 14 m sgs

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Jeff Parker <jparker@xxxxxxxxxxxx>
Date: Fri, 18 Jan 2002 15:04:19 -0500
> >Subject: [Ethereal-users] Resolve MAC addresses
> >
> >Hello.
> >
> >Does anyone know a way to resolve a MAC address to IP address?
> >I'm using a win32 OS.
> >
> >/Martin

[As noted in a message that arrived as I finished editing this one...]

If you have the IP address, this will get you the MAC address.
However, if you are starting with a MAC address, it is harder
to go the other way.  RARP presumes a RARP server.  Someone
might have installed a new machine without getting a legal
IP address.   

	You can list the whole ARP table, as suggested 
	above, and see if you have an entry that matches.
	You might not.  

	You can sort an Ethereal trace by MAC address 
	and see if you have a match.  You might not.  

	You can try pinging the network 
		ping 198.3.104.255
	which should elicit a reply from all the IP
	machines in the subnet, and thus feed info
	into one of the two previous methods.
	The host may not be on the network you 
	think it should be on.  

- jeff parker
- axiowave networks.