Re: remote MAC address discovery?

From: Stephen Friedl (steve@unixwiz.net)
Date: Tue Dec 10 2002 - 13:01:32 EST


> Is there any way to discover the MAC address of a device if you're not
> connected to the local subnet?

In general, no. But sometimes yes.

1) If they have open NETBIOS, this can be fetched as a result of a NETBIOS
   namserver query. See my nbtscan tool:

        http://www.unixwiz.net/tools/nbtscan.html

2) if they have open SNMP, this can often be queried from the interface.

3) if a *neighboring* machine has SNMP open, you can often query the ARP
   table to find it.

Steve

---
Stephen J Friedl | Software Consultant | Tustin, CA | +1 714 544-6561
www.unixwiz.net | I speak for me only | KA8CMY | steve@unixwiz.net

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:26 EDT