Solved

Mac-Adddress to IP address Arp???

Posted on 2004-08-09
12
3,466 Views
Last Modified: 2010-05-18
Does any one know of a way to find the IP address of a computer when all I have is the Mac-Address.

I thought there was an inverse arp command but I cant seem to get that working

thanks
0
Comment
Question by:kdog3445
  • 5
  • 3
  • 2
  • +2
12 Comments
 
LVL 43

Expert Comment

by:JFrederick29
ID: 11753217
No, there isn't unfortunately, not one I could find anyway.

Do you have a router where you can view the ARP cache?  If you can, you should see the MAC address in the routers ARP cache along with the corresponding IP address, as long as the PC is on the network.
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 11753367
kdog3445 - what kind of network do you have?  Managed or not?  Pro gear or Small Office/Home Office (SOHO) gear?  Switched or hub?

If you're in a hub environment, you could do a sniff for a while of your network and then look for that MAC and look at the associated IP.

Ideally, you would view the ARP table in the default gateway router for the segment.
0
 
LVL 20

Expert Comment

by:DVation191
ID: 11753448
Well, I know what you are talking about is RARP ( Reverse Address Resolution Protocol ), but unless you have access to the router (enterprise-grade), looking at the tables won't be possible. Maybe another expert can shine some more light on the situation
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 
LVL 79

Expert Comment

by:lrmoore
ID: 11753576
Is this system on your own local LAN? If not-- fuggedaboutit.
If it is on your own local LAN, in the same subnet, try a broadcast ping:
ping 192.168.1.255

All live hosts should respond, then use "arp -a" from Command line:
C:\WINDOWS>ping 192.168.12.255

Pinging 192.168.12.255 with 32 bytes of data:

Reply from 192.168.12.253: bytes=32 time<1ms TTL=255
Reply from 192.168.12.132: bytes=32 time<1ms TTL=64
Reply from 192.168.12.132: bytes=32 time<1ms TTL=64
Reply from 192.168.12.132: bytes=32 time<1ms TTL=64

Ping statistics for 192.168.122.255:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\WINDOWS>arp -a

Interface: 192.168.122.150 --- 0x2
  Internet Address      Physical Address      Type
  192.168.122.132       00-0c-41-d6-1e-5b     dynamic
  192.168.122.149       00-07-95-24-74-4f     dynamic
  192.168.122.157       00-0c-41-a9-3d-51     dynamic

C:\WINDOWS>

If it's not in the same subnet, but still on the local LAN, then you might have to resort to using a sniffer like Ethereal:
http://www.ethereal.com



0
 
LVL 43

Expert Comment

by:JFrederick29
ID: 11753759
Excellent lrmoore!

I bow to you...
0
 

Author Comment

by:kdog3445
ID: 11753997
It is a LAN and I do have acess to the Router. What is the command to view the Arp table?

I do sh Mac-address and it list all connected MAC's but does not list IP address. What command am I missing?

Thanks
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 11754018
What kind of router?

You want to look at the ARP table, not the MAC forwarding table (assuming this is a layer 3 switch).

It's probably something along the lines of "show ip arp"  or "show arp"
0
 
LVL 27

Accepted Solution

by:
pseudocyber earned 125 total points
ID: 11754047
On a Cisco layer 3 box ...

rtr#show ip arp ?
  GE-WAN               GigabitEthernetWAN IEEE 802.3z
  GigabitEthernet      GigabitEthernet IEEE 802.3z
  H.H.H                48-bit hardware address of ARP entry
  Hostname or A.B.C.D  IP address or hostname of ARP entry
  Null                 Null interface
  Vlan                 Catalyst Vlans
  summary              IP ARP table summary
  |                    Output modifiers
  <cr>
0
 

Author Comment

by:kdog3445
ID: 11754121
It is a cisco and I am doing
rtr#show ip arp ?
  GE-WAN               GigabitEthernetWAN IEEE 802.3z
  GigabitEthernet      GigabitEthernet IEEE 802.3z
  H.H.H                48-bit hardware address of ARP entry
  Hostname or A.B.C.D  IP address or hostname of ARP entry
  Null                 Null interface
  Vlan                 Catalyst Vlans
  summary              IP ARP table summary
  |                    Output modifiers
  <cr>

I put in the Mac address after sh IP arp

but nothing gets displayed
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 11754143
What do you get if you do a show ip arp?

The machine has to be on segments connected to the router.  It could also be the machine is off and has aged out of the arp table.
0
 

Author Comment

by:kdog3445
ID: 11754305
Ahhhhh Haaaaaa

User Error

I was running all this from a switch and not the core router

so from the switch I run
sh mac-address int fast 5/3   and get the MAC

Then from the router I run

sh ip arp 00-00-00-00-00-00
that get me the IP

SWEET -- thanks all
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 11754450
You're welcome! :)
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How VPC help preventing STP Loops 4 98
Changed email server and mail going to both servers 19 38
ISP Change 14 49
Internet Service Provider 3 49
#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question