[TriLUG] finding a MAC address

[Shane O.]

But the firewall is a BSD box, so tcpdump should do the same thing, without
the cabling and "other box" hassles...

Shane O.

On Fri, Aug 15, 2008 at 1:43 PM, Shawn Taylor <shtaylor at gpi.com> wrote:

> If you stick a sniffer in-line, in front of the firewall, you should be
> able
> to see what is going on. It's a flat network you should be able to match up
> the IP address with the MAC with the destination IP and hopefully identify
> the node based on any other traffic contents in the packet data.
>
> Shawn
>
> Scott wrote:
>
> Doh - ethernet.  yes Mac is in Ethernet headers, but they dont go out to
> the
> other network.  So I am not getting your next sentence.
>
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>



-- 
Shane O.
========
Shane O'Donnell
shaneodonnell at gmail.com
====================