Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Jan 2001 13:09:03 +0200
From:      Peter Pentchev <roam@orbitel.bg>
To:        disassembled <modulus@icmp.dhs.org>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: mapping arp
Message-ID:  <20010130130903.E328@ringworld.oblivion.bg>
In-Reply-To: <Pine.BSF.4.21.0101292110150.24874-100000@icmp.dhs.org>; from modulus@icmp.dhs.org on Mon, Jan 29, 2001 at 09:14:27PM -0600
References:  <Pine.BSF.4.21.0101292110150.24874-100000@icmp.dhs.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jan 29, 2001 at 09:14:27PM -0600, disassembled wrote:
> 
> I was wondering if there was anyway i could map an mac address back
> to it's assigned IP address without using a rarpd.
> 
> something i was considering writing was using writing a program 
> that sent out a series of arp who-has packets to the network
> then run a cmp on the 48-bit values that returned in the 
> replies against some mac address that would be supplied on the 
> command line.
> 
> if anyone knows anything about that & could help me out;
> i would be greatful.

<ANSWER TYPE="obvious,stupid" PRIORITY="next to useless">
If your system has already seen IP traffic from the machine in question,
you should have its address in the kernel's ARP cache.  arp -an should
display it, or you could query it the way arp(1) does.
</ANSWER>

G'luck,
Peter

-- 
I am the thought you are now thinking.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010130130903.E328>