Link to home
Start Free TrialLog in
Avatar of Matrix1000
Matrix1000

asked on

Find MAC Address of remote machine using its IP address?

If I know the IP of a machine thats causing trouble, how do I find its MAC address? I'm running XP Pro.
It's not on the same network as I am but I can ping it, and I tried arp -a but its ip doesnt' appear in the arp list because its outside of my firewall.

Avatar of Lazarus
Lazarus
Flag of United States of America image

If you ping the computer you can find the MAC address in the arp cache.

Open a cmd and put in: arp -a

With the free GFI Security Scanner you can also scan the IP-Adress.
http://www.gfi.com/lannetscan/
Ah.. sorry.. you can't get it with ARP if your not on the same Subnet. My BAD...
SOLUTION
Avatar of star57tech
star57tech

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Ron Malmstead
Only two ways to get that if your not on the same network.

A - You hack their computer.....hahha....i'm sorry...
B - You hack into the router, firewall, or modem and read their dhcp wired/wireless connections list.  Assuming they are using DHCP on whatever hardware device they are using to connect......

If your not on their network...you have to hack a device that is to find the MAC id..
btw....why would you want their Mac id anyway....?

That kind of info is only useful to the FBI or CIA.

Because a Mac Id can trace back to the exact point of time the networkcard was manufactured, in what city, state, zip, the computer system it utlimately wound up in when it was sold, and purchased with whoevers credit card.  A MAC Id is much like a serial number on a gun.  But unless your the FBI or CIA, I doubt a Mac Id is going to help you with stopping the troublemaker.  
FYI: Definitely there are privacy issues here -- Beware!
---------------
Maybe better to block/deny the IP access to your PC/Network.
Avatar of pseudocyber
pseudocyber

Simple answer is, if it's not on a network you control, you can't without some kind of hack or spyware which you could get onto the target and report back to you.  If it's on a network you control, you look in the MAC forwarding table of the switch it's connected to, if you know the port, or you look in the ARP table of the default gateway for the IP network it's attached to.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Matrix1000

ASKER

We're using a Motorola Canopy wireless wan. The Canopy system acts like a big hub/broadcast domain. Some user has hooked their pc directly to their antenna and their pc has a virus or is running some sort of scanner/pinger. It is flooding the network with pings. Their signal goes from their antenna, through the backhaul antenna on the mountain/tower back out the backhaul antenna and over to our main backhaul unit on top of our main intertie with sprint fiber.

The problem is that I can block this guy at the intertie but cant figure out which/whos antenna is the offending unit and its killing the backhaul connection...which kills everyone :)  So I can get his MAC which by the way changes at random, so this may not help, I can eventually figure out who it is.

FBI, no,,,,ISP :)
If he's on your OWN network, then you can ping it and look at the arp entry on your machine by typing ARP -a in a command line.  Otherwise, examine the ARP table on your default gateway.
Matrix1000:  I also work for a wisp that uses Canopy gear...  maybe we can network and share experiences to help manage this stuff better.  Drop me a line at robtullis(at)yahoo.com if you are interested.