Solved

Mac-Adddress to IP address Arp???

Posted on 2004-08-09
12
3,468 Views
Last Modified: 2010-05-18
Does any one know of a way to find the IP address of a computer when all I have is the Mac-Address.

I thought there was an inverse arp command but I cant seem to get that working

thanks
0
Comment
Question by:kdog3445
  • 5
  • 3
  • 2
  • +2
12 Comments
 
LVL 43

Expert Comment

by:JFrederick29
ID: 11753217
No, there isn't unfortunately, not one I could find anyway.

Do you have a router where you can view the ARP cache?  If you can, you should see the MAC address in the routers ARP cache along with the corresponding IP address, as long as the PC is on the network.
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 11753367
kdog3445 - what kind of network do you have?  Managed or not?  Pro gear or Small Office/Home Office (SOHO) gear?  Switched or hub?

If you're in a hub environment, you could do a sniff for a while of your network and then look for that MAC and look at the associated IP.

Ideally, you would view the ARP table in the default gateway router for the segment.
0
 
LVL 20

Expert Comment

by:DVation191
ID: 11753448
Well, I know what you are talking about is RARP ( Reverse Address Resolution Protocol ), but unless you have access to the router (enterprise-grade), looking at the tables won't be possible. Maybe another expert can shine some more light on the situation
0
Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.

 
LVL 79

Expert Comment

by:lrmoore
ID: 11753576
Is this system on your own local LAN? If not-- fuggedaboutit.
If it is on your own local LAN, in the same subnet, try a broadcast ping:
ping 192.168.1.255

All live hosts should respond, then use "arp -a" from Command line:
C:\WINDOWS>ping 192.168.12.255

Pinging 192.168.12.255 with 32 bytes of data:

Reply from 192.168.12.253: bytes=32 time<1ms TTL=255
Reply from 192.168.12.132: bytes=32 time<1ms TTL=64
Reply from 192.168.12.132: bytes=32 time<1ms TTL=64
Reply from 192.168.12.132: bytes=32 time<1ms TTL=64

Ping statistics for 192.168.122.255:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\WINDOWS>arp -a

Interface: 192.168.122.150 --- 0x2
  Internet Address      Physical Address      Type
  192.168.122.132       00-0c-41-d6-1e-5b     dynamic
  192.168.122.149       00-07-95-24-74-4f     dynamic
  192.168.122.157       00-0c-41-a9-3d-51     dynamic

C:\WINDOWS>

If it's not in the same subnet, but still on the local LAN, then you might have to resort to using a sniffer like Ethereal:
http://www.ethereal.com



0
 
LVL 43

Expert Comment

by:JFrederick29
ID: 11753759
Excellent lrmoore!

I bow to you...
0
 

Author Comment

by:kdog3445
ID: 11753997
It is a LAN and I do have acess to the Router. What is the command to view the Arp table?

I do sh Mac-address and it list all connected MAC's but does not list IP address. What command am I missing?

Thanks
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 11754018
What kind of router?

You want to look at the ARP table, not the MAC forwarding table (assuming this is a layer 3 switch).

It's probably something along the lines of "show ip arp"  or "show arp"
0
 
LVL 27

Accepted Solution

by:
pseudocyber earned 125 total points
ID: 11754047
On a Cisco layer 3 box ...

rtr#show ip arp ?
  GE-WAN               GigabitEthernetWAN IEEE 802.3z
  GigabitEthernet      GigabitEthernet IEEE 802.3z
  H.H.H                48-bit hardware address of ARP entry
  Hostname or A.B.C.D  IP address or hostname of ARP entry
  Null                 Null interface
  Vlan                 Catalyst Vlans
  summary              IP ARP table summary
  |                    Output modifiers
  <cr>
0
 

Author Comment

by:kdog3445
ID: 11754121
It is a cisco and I am doing
rtr#show ip arp ?
  GE-WAN               GigabitEthernetWAN IEEE 802.3z
  GigabitEthernet      GigabitEthernet IEEE 802.3z
  H.H.H                48-bit hardware address of ARP entry
  Hostname or A.B.C.D  IP address or hostname of ARP entry
  Null                 Null interface
  Vlan                 Catalyst Vlans
  summary              IP ARP table summary
  |                    Output modifiers
  <cr>

I put in the Mac address after sh IP arp

but nothing gets displayed
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 11754143
What do you get if you do a show ip arp?

The machine has to be on segments connected to the router.  It could also be the machine is off and has aged out of the arp table.
0
 

Author Comment

by:kdog3445
ID: 11754305
Ahhhhh Haaaaaa

User Error

I was running all this from a switch and not the core router

so from the switch I run
sh mac-address int fast 5/3   and get the MAC

Then from the router I run

sh ip arp 00-00-00-00-00-00
that get me the IP

SWEET -- thanks all
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 11754450
You're welcome! :)
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question