From owner-freebsd-security Tue Jan 30 3:11: 1 2001 Delivered-To: freebsd-security@freebsd.org Received: from ringworld.nanolink.com (ringworld.nanolink.com [195.24.48.189]) by hub.freebsd.org (Postfix) with SMTP id 03AB637B503 for ; Tue, 30 Jan 2001 03:10:40 -0800 (PST) Received: (qmail 4414 invoked by uid 1000); 30 Jan 2001 11:09:03 -0000 Date: Tue, 30 Jan 2001 13:09:03 +0200 From: Peter Pentchev To: disassembled Cc: freebsd-security@FreeBSD.ORG Subject: Re: mapping arp Message-ID: <20010130130903.E328@ringworld.oblivion.bg> Mail-Followup-To: disassembled , freebsd-security@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from modulus@icmp.dhs.org on Mon, Jan 29, 2001 at 09:14:27PM -0600 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, Jan 29, 2001 at 09:14:27PM -0600, disassembled wrote: > > I was wondering if there was anyway i could map an mac address back > to it's assigned IP address without using a rarpd. > > something i was considering writing was using writing a program > that sent out a series of arp who-has packets to the network > then run a cmp on the 48-bit values that returned in the > replies against some mac address that would be supplied on the > command line. > > if anyone knows anything about that & could help me out; > i would be greatful. If your system has already seen IP traffic from the machine in question, you should have its address in the kernel's ARP cache. arp -an should display it, or you could query it the way arp(1) does. G'luck, Peter -- I am the thought you are now thinking. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message