Link to home
Start Free TrialLog in
Avatar of GreenasMoss
GreenasMoss

asked on

MAC Address to find IP Address

What is the cmd line command to find a workstation with only a mac address

I thought it was nbtstat, but that doesn't seem to be the correct command i am looking for.

Thanks
Avatar of Eirman
Eirman
Flag of Ireland image


Did you try .... ipconfig /all
Does ARP -A workk?
Avatar of GreenasMoss
GreenasMoss

ASKER

ipconfig /all from what i know will give me the mac, host, ip, and other information on the computer you are working on.

i am trying to find a workstation on the network with just a mac.
i am thinking it's an arp command, but it doesn't seem to give me what i want.

it is giving me a bad argument error
Sorry, meant to add the following.

PING the IP address of user (this stores a copy of their mac address in the ARP translation table)

then do ARP -A
ASKER CERTIFIED SOLUTION
Avatar of Paul Tomasi
Paul Tomasi
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
thanks
You can use this powershell script:
 
arp -a | select-string "00-1f-d1-6f-e9-d3" |% { $_.ToString().Trim().Split(" ")[0] }

Open in new window

Change MAC according to your needs
ok i am a newbie at powershell, and i ran this script in powershell however it gave me two arrows, is there something i might be doing wrong?

1:arp -a | select-string  select-string "xx-xx-xx-xx-xx-xx" |% { $_.ToString().Trim().Split(" ")

do it need that 1 in front, and the mac address is xx out to protect the user. thanks
just to state the obvious(ish) but you can only get the mac address of devices specifically on your subnet.... Anything on a different subnet will show as your default gateway / router mac address...

Steve
so when the switch is broadcasting on my subnet, however the mac i am trying to track down is a computer that was or still on the domain but in a differnet subnet, is there away to do this.

i am using discovering software, but i was wondering if there was a command line command that could answer what is the ip address of a computer when you only have the mac address.
No, not unless it is on your subnet, it is how tcp/ip and networks in general work....

If it is a different subnet look at your mac address / arp tables on your core switch / routers... or if you can get to a device on the other subnet do a PING and arp -A

Steve
Another way you might be able to tell if look in your DHCP server(s)...  anyway this Q is closed, was only adding a little comment before.