RE: NMAP and MAC Addresses

["Dario Ciccarone (dciccaro)" <dciccaro () cisco com>]

The question shows lack of understanding of how an IP network works.

Local network = ARP, encap L3 on L2, transmit.

Non-local = ARP for default gateway, encap on L2 frame to local gateway,
drop into the wire.

Comer and Stevens, or just Stevens. If on a budget,
http://www.redbooks.ibm.com/Redbooks.nsf/RedbookAbstracts/gg243376.html

So - neither nmap nor any other tool will be able to give you the MAC
address of a device outside your L2 broadcast domain. Well, actually you
can try a "nbtstat -A <ip_address>" for Windows machines.

Dario
 

> -----Original Message-----
> From: nmap-dev-bounces () insecure org 
> [mailto:nmap-dev-bounces () insecure org] On Behalf Of Sydie, Colin
> Sent: Tuesday, February 12, 2008 7:11 PM
> To: nmap-dev () insecure org
> Subject: NMAP and MAC Addresses
>
> Hello,
>
> I need a little help with NMAP.  I'm trying to run it on a network in
> which I wish to return MAC addresses from every system.  These systems
> can be anything from Microsoft to Linux to Other.  I want to retrieve
> everything with a MAC address based on an IP address query.
>
> I can get it to work on the same subnet however; I can't seem to
> retrieve MAC addresses from systems on a different subnet.  Is there a
> way to retrieve MAC addresses from any subnet using NMAP?
>
>  
>
> Thanks,
>
>  
>
>  
>
> Colin Sydie
>
>  
>
>  
>
>  
>
>  
>
>  
>
>  
>
>  
>
>  

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org