ARP question

If you have the MAC address of a device on a network, is there an easy way to it's IP?
LVL 2
OAC TechnologyProfessional NerdsAsked:
Who is Participating?
 
NickVdConnect With a Mentor Commented:
Take a look at the following:  http://discussions.virtualdr.com/archive/index.php/t-157716.html

it's a bit of a hack, but it'll work...

"QUOTED"
Quick workaround using built-in Windows tools (assuming you're using 192.168.1.* and xx-xx-xx-xx-xx-xx is the problem MAC address in lowercase):for /l %i in (1,1,254) do ping -n 1 -w 1 192.168.1.%i
arp -a | find "xx-xx-xx-xx-xx-xx"The top line sends out a bunch of pings but doesn't stop to wait for the responses (the response packets will still populate the ARP table). The second line prints the arp table (which should at that point contain all the active machines on your network) and finds the line you're interested in.
"______"
0
 
tkfastCommented:
Cisco router, the command is "show arp"   you will find the mac to ip there.  

Windows from prompt you can type "arp -a"

You can also look in the DHCP server logs.  

http://www.windowsitpro.com/Articles/ArticleID/14462/14462.html
0
 
OAC TechnologyProfessional NerdsAuthor Commented:
if it isn't listed in the arp cache when you do an arp -a, is there another way to find it?
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
NickVdCommented:
To update after a little more searching, I found: http://www.bgnett.no/~giva/

It's a link to a software utility that offers a whole bunch of network related utils.

Hope this helps!
0
 
The--CaptainCommented:
>If you have the MAC address of a device on a network, is there an easy way
>to it's IP?

Hmmm.   Depends on your definition of easy...

First, you must assume the machine containing the device with the MAC in question is running an IP stack.

Second, you must assume that it will respond to IP requests (be they ICMP probes or other service requests).

If both of those conditions can be satisfied, then scanning techniques may yield the IP once it has been entered into the ARP table of the scanner (by means of previously discussed scanning techniques).

It's completely possible to have a machine with an IP address on your network that would be "invisible", not responding to any IP scans (a packet drop looks a lot like an absent machine).  If such a machine attempts to transmit using IP, then there should be an entry in an ARP table somewhere, but if it's a stealthy listener, you may be out of luck.

Cheers,
-Jon
0
 
lrmooreConnect With a Mentor Commented:
I like this mac-address discovery tool
http://www.solarwinds.com/products/toolsets/discovery_tools.aspx

The key is that the device with the mac address, and the PC trying to find the IP address must be on the same physical network or VLAN.
0
 
tkfastConnect With a Mentor Commented:
You can also use Angry IP Scanner and in Options, then options, click Selected Scanned Columns and add Mac Address to the Selected Colums and then you scan scan the network and it will allow you to sort my mac and you will be set.  

http://www.angryziber.com/ipscan/download.php
0
 
The--CaptainCommented:
>The key is that the device with the mac address, and the PC trying to find the
>IP address must be on the same physical network or VLAN

Indeed - That should've been prerequisite number 3, in my above comment

Cheers,
-Jon
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.