[TriLUG] finding a MAC address

Shawn Taylor shtaylor at gpi.com
Fri Aug 15 13:43:37 EDT 2008


If you stick a sniffer in-line, in front of the firewall, you should be able
to see what is going on. It's a flat network you should be able to match up
the IP address with the MAC with the destination IP and hopefully identify
the node based on any other traffic contents in the packet data.

Shawn

Scott wrote:

Doh - ethernet.  yes Mac is in Ethernet headers, but they dont go out to the
other network.  So I am not getting your next sentence.




More information about the TriLUG mailing list