[TriLUG] Linux utility to return mac address

[Ryan Leathers]

Well, that sorta depends on what remote means.  If you don't need a
router to get there then ARP is all you need.
On your Linux box type arp -a  to see the cache of mac to ip address
translations.

If you want to grab all of the ARP traffic on your network, then there
are a number of tools that can do this, not the least of which is
echolot  <http://echolot.sourceforge.net/>.  Ethereal and TCPdump are
able protocol analyzers and Kismet is a wireless analyzer all of which
can accomplish what you have requested (and much more) on a local
network.

If what you want is to discover MAC addresses from the distant side of a
router then you will either need to get interactive on that distant
network or get a client loaded there to do your bidding.  

If you just want to detect ARP spoofing attacks then I suggest ACiD
<http://webteca.port5.com/ACiD.htm>

Ryan




-----Original Message-----
From: Chris Hedemark [mailto:chris at yonderway.com]
Sent: Wednesday, November 27, 2002 9:37 AM
To: trilug at trilug.org
Subject: Re: [TriLUG] Linux utility to return mac address

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

man arp

On Wednesday, November 27, 2002, at 09:10 AM, Chris Bullock wrote:

> New to the Linux community, and tring to find a linux utility or
> preferably a command that will return a mac address of a remote
> machine. I will have the hostname and IP.
>
> Thanks in advance.
> Chris
>
>
>
> _______________________________________________
> TriLUG mailing list
>    http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ:
>    http://www.trilug.org/~lovelace/faq/TriLUG-faq.html
>
>

Chris Hedemark
Hillsborough, NC
http://yonderway.com


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (Darwin)

iD8DBQE95NiYYPuF4Zq9lvYRAleWAJ4pzvS0nv4aSbt77BSSt1h8rplHPwCgqWMI
LEBqqqZisyJJPaycmQaMbO8=
=ZyRx
-----END PGP SIGNATURE-----

_______________________________________________
TriLUG mailing list
    http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ:
    http://www.trilug.org/~lovelace/faq/TriLUG-faq.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3061 bytes
Desc: not available
URL: <http://www.trilug.org/pipermail/trilug/attachments/20021127/6698a70e/attachment.bin>