Ressolving a MAC address

J.B · 13 Feb 2009 at 10:43

Hey guys, was wondering if someone could help me with a project Im working on. Basicly I have the MAC address but need to find a the IP, dont have access to the router so cant look at the DHCP allocation table.

I have a feeling I want to do some sort of inverse ARP.

Any words of wisdom as Im stumped! :confused:

J.B · 13 Feb 2009 at 10:50

Yeah I got as far as arp -a, but that only maps ones that are in the arp table. So if Id pinged it already it would appear in the arp table, but I dont know the IP.

J.B · 13 Feb 2009 at 10:52

its on the internal network, bear in mind I dont have access to the router.

J.B · 13 Feb 2009 at 11:05

ARP Tools website said:
This tool cannot 'ping' a MAC address and get an IP address back in return -- the ARP protocol does not work that way

Doesnt look like its gonna help, or that ARP is the answer for me!

Anyone else got any ideas?

J.B · 13 Feb 2009 at 11:30

Just using an IP scanner now, seems like the kind of thing that will work, however, I think scanning all the IPs might be the kind of thing that ruffles the feathers of the network admins.

Its for my dissertation and the people who manage the network wouldnt give me a static IP for security reasons

J.B · 13 Feb 2009 at 15:31

Umm well half and half, the IP scanner I used didnt display MAC addresses so once I've pinged all the clients I then have to arp -a to display the table, then go throught it to find the matching MAC to what Im looking for.

Im thinking of writing my own batch file that will do this and filter out the correct MAC address.

Its not perfect though as the address range is 10.91.YY.XX where YY iss 2-15 and XX is 1-255, so its a lot of IP addresses.

Its a real problem but im sure it will have a solution.