Go Back  Bike Forums > The Lounge > Foo
Reload this Page >

How do I find the MAC address of a remote Unix server?

Foo Off-Topic chit chat with no general subject.

How do I find the MAC address of a remote Unix server?

Old 09-26-07, 12:49 PM
  #1  
Old Dirt Hill
Bring That Beat Back
Thread Starter
 
Old Dirt Hill's Avatar
 
Join Date: Oct 2005
Location: I lost my legs
Posts: 937
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
How do I find the MAC address of a remote Unix server?

If I have the IP address for a remote Unix server, how do I find that server's MAC address?

I thought I could do it with "arp -a" but that doesn't seem to be working for me.

Suggestions? Thanks.
Old Dirt Hill is offline  
Old 09-26-07, 12:50 PM
  #2  
Old Dirt Hill
Bring That Beat Back
Thread Starter
 
Old Dirt Hill's Avatar
 
Join Date: Oct 2005
Location: I lost my legs
Posts: 937
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
BTW, I'm running WinXP, but can also do this from a Cisco switch if that gives me more options.
Old Dirt Hill is offline  
Old 09-26-07, 12:54 PM
  #3  
squegeeboo
******
 
squegeeboo's Avatar
 
Join Date: Dec 2006
Location: Rochester, NY
Posts: 949

Bikes: Specalized Tri-Cross

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 1 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
silly, Unix doesn't run on Mac, it's the other way around.
__________________
In the words of Einstein
"And now I think I'll take a bath"
squegeeboo is offline  
Old 09-26-07, 12:58 PM
  #4  
Old Dirt Hill
Bring That Beat Back
Thread Starter
 
Old Dirt Hill's Avatar
 
Join Date: Oct 2005
Location: I lost my legs
Posts: 937
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Alright, well I'm looking for the Ethernet address of the Unix server.

Better?
Old Dirt Hill is offline  
Old 09-26-07, 12:59 PM
  #5  
linux_author
370H-SSV-0773H
 
linux_author's Avatar
 
Join Date: May 2005
Location: Penniless Park, Fla.
Posts: 2,750

Bikes: Merlin Fortius, Specialized Crossroads & Rockhopper, Serotta Fierte, Pedal Force RS2

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
- if you're logged into the server, you can find the MAC (hardware) address(es) of active interface(s) using ifconfig:

ifconfig | grep ether

- however, MAC addresses may be spoofed:

one way to spoof a MAC

- other tools exist for Software from Satan™, such as SMAC

(there are lots of ways to skin a cat, btw, such as netcat [cough, cough])
linux_author is offline  
Old 09-26-07, 01:01 PM
  #6  
squegeeboo
******
 
squegeeboo's Avatar
 
Join Date: Dec 2006
Location: Rochester, NY
Posts: 949

Bikes: Specalized Tri-Cross

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 1 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Will any of these do?

Although it appears to be only for the US, so hopefully your not Canadian or anything worse.
__________________
In the words of Einstein
"And now I think I'll take a bath"
squegeeboo is offline  
Old 09-26-07, 01:01 PM
  #7  
Old Dirt Hill
Bring That Beat Back
Thread Starter
 
Old Dirt Hill's Avatar
 
Join Date: Oct 2005
Location: I lost my legs
Posts: 937
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
That's the thing...I'm not on the server. I'm trying to find exactly where it's plugged into in our network, which I can do if I know the MAC address.

I don't have access to the server I'm trying to locate or else I'd log in and do an ifconfig.
Old Dirt Hill is offline  
Old 09-26-07, 01:05 PM
  #8  
edzo
Senior Member
 
Join Date: Feb 2006
Posts: 1,564
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 1 Post(s)
Likes: 0
Liked 1 Time in 1 Post
you use arp

and it is called the MAC address... media access control

because the device you are seeking may not be ethernet it may be any of
a number of network technologies. you want the hardware address and that
is the 'Media Access Control' address

address resolution protocol is used to discover mac addresses when only the network
address is known. it works if the devices in-between allow arp resolution. often, for
security reasons, they do not allow arp across routers or firewalls
edzo is offline  
Old 09-26-07, 01:14 PM
  #9  
ax0n
Trans-Urban Velocommando
 
ax0n's Avatar
 
Join Date: Nov 2006
Location: Lenexa, KS
Posts: 2,400

Bikes: 06 Trek 1200 - 98 DB Outlook - 99 DB Sorrento

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
You hack into it, then do ifconfig.

If you're on the same subnet, ping it first, then arp it.

At first, I can't get a MAC for this box on my network:
-bash-3.1$ arp 192.168.0.104
192.168.0.104 (192.168.0.104) -- no entry

Then I ping it, and it's cached. woot.
-bash-3.1$ ping -c4 192.168.0.104
PING 192.168.0.104 (192.168.0.104): 56 data bytes
64 bytes from 192.168.0.104: icmp_seq=0 ttl=255 time=4.247 ms
64 bytes from 192.168.0.104: icmp_seq=1 ttl=255 time=0.936 ms
64 bytes from 192.168.0.104: icmp_seq=2 ttl=255 time=0.937 ms
64 bytes from 192.168.0.104: icmp_seq=3 ttl=255 time=0.927 ms
--- 192.168.0.104 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.927/1.761/4.247/1.435 ms
-bash-3.1$ arp 192.168.0.104
? (192.168.0.104) at 08:00:20:fd:b3:62 on le0

Awwyah.

-bash-3.1$ whoami
you're my daddy
-bash-3.1$ that's right, beeyatch.
ax0n is offline  
Old 09-26-07, 01:35 PM
  #10  
Old Dirt Hill
Bring That Beat Back
Thread Starter
 
Old Dirt Hill's Avatar
 
Join Date: Oct 2005
Location: I lost my legs
Posts: 937
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by edzo View Post
you use arp

and it is called the MAC address... media access control

because the device you are seeking may not be ethernet it may be any of
a number of network technologies. you want the hardware address and that
is the 'Media Access Control' address

address resolution protocol is used to discover mac addresses when only the network
address is known. it works if the devices in-between allow arp resolution. often, for
security reasons, they do not allow arp across routers or firewalls
Thank you for responding before reading my posts. I understand what a MAC is and mentioned the Ethernet address as I knew the server is running on an Ethernet network. I also indicated that arp isn't working (although I didn't elaborate).

Anyway, if you really thought you were helping...then thank you.
Old Dirt Hill is offline  
Old 09-26-07, 01:41 PM
  #11  
Maelstrom 
Wood Licker
 
Maelstrom's Avatar
 
Join Date: Apr 2002
Location: Whistler,BC
Posts: 16,966

Bikes: Trek Fuel EX 8 27.5 +, 2002 Transition Dirtbag, Kona Roast 2002

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 23 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by ax0n View Post
You hack into it, then do ifconfig.

If you're on the same subnet, ping it first, then arp it.

At first, I can't get a MAC for this box on my network:
-bash-3.1$ arp 192.168.0.104
192.168.0.104 (192.168.0.104) -- no entry

Then I ping it, and it's cached. woot.
-bash-3.1$ ping -c4 192.168.0.104
PING 192.168.0.104 (192.168.0.104): 56 data bytes
64 bytes from 192.168.0.104: icmp_seq=0 ttl=255 time=4.247 ms
64 bytes from 192.168.0.104: icmp_seq=1 ttl=255 time=0.936 ms
64 bytes from 192.168.0.104: icmp_seq=2 ttl=255 time=0.937 ms
64 bytes from 192.168.0.104: icmp_seq=3 ttl=255 time=0.927 ms
--- 192.168.0.104 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.927/1.761/4.247/1.435 ms
-bash-3.1$ arp 192.168.0.104
? (192.168.0.104) at 08:00:20:fd:b3:62 on le0

Awwyah.

-bash-3.1$ whoami
you're my daddy
-bash-3.1$ that's right, beeyatch.
From a windows to unix box you can ping it, then arp it as well just put -a in between

arp -a 10.10.10.35
Maelstrom is offline  
Old 09-26-07, 01:44 PM
  #12  
Maelstrom 
Wood Licker
 
Maelstrom's Avatar
 
Join Date: Apr 2002
Location: Whistler,BC
Posts: 16,966

Bikes: Trek Fuel EX 8 27.5 +, 2002 Transition Dirtbag, Kona Roast 2002

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 23 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by Old Dirt Hill View Post
If I have the IP address for a remote Unix server, how do I find that server's MAC address?

I thought I could do it with "arp -a" but that doesn't seem to be working for me.

Suggestions? Thanks.

Just noticed, you did try this, that should have worked, did you ping it first?

OPTION 2
another option, ping the server and then login to the cisco switch and type "show arp"...the newly pinged server should be listed in the arp table.
Maelstrom is offline  
Old 09-26-07, 01:45 PM
  #13  
Old Dirt Hill
Bring That Beat Back
Thread Starter
 
Old Dirt Hill's Avatar
 
Join Date: Oct 2005
Location: I lost my legs
Posts: 937
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by Maelstrom View Post
From a windows to unix box you can ping it, then arp it as well just put -a in between

arp -a 10.10.10.35
Firewalls, etc. are making arp commands useless. That's why I need another way (or a way to do it from a Cisco switch that is local to the server).
Old Dirt Hill is offline  
Old 09-26-07, 01:48 PM
  #14  
Maelstrom 
Wood Licker
 
Maelstrom's Avatar
 
Join Date: Apr 2002
Location: Whistler,BC
Posts: 16,966

Bikes: Trek Fuel EX 8 27.5 +, 2002 Transition Dirtbag, Kona Roast 2002

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 23 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by Old Dirt Hill View Post
Firewalls, etc. are making arp commands useless. That's why I need another way (or a way to do it from a Cisco switch that is local to the server).
See post 12
Maelstrom is offline  
Old 09-26-07, 03:37 PM
  #15  
BlastRadius
Direct Hit Not Required
 
BlastRadius's Avatar
 
Join Date: Nov 2003
Location: San Bruno, CA
Posts: 6,193

Bikes: Leopard DC1, Ridley X-Fire, GT Zaskar 9r

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 2 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by Maelstrom View Post
Just noticed, you did try this, that should have worked, did you ping it first?

OPTION 2
another option, ping the server and then login to the cisco switch and type "show arp"...the newly pinged server should be listed in the arp table.
If it's a newer IOS, "show arp | include x.x.x.x" where x.x.x.x is IP of server in question.
Is the switch IOS or CatOS based?

To see which port the device is connected to:
CatOS: sh cam dynamic AA-BB-CC-DD-EE
if it's on a trunk, you need to follow the trunk to the access switch.
IOS: I forget but I think it's something like "show mac-address-table AA-BB-CC-DD-EE".
BlastRadius is offline  
Old 09-26-07, 04:18 PM
  #16  
michiganboy
Member
 
michiganboy's Avatar
 
Join Date: Jul 2007
Posts: 38

Bikes: Lemond Wayzata, Giant ATX 880, Jamis Dakar

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
I always use the angry ip scanner. You scan a subnet and it returns the hostname and mac address.

http://www.angryziber.com/ipscan/

I have been using this tool for years; it picks up almost everything.
michiganboy is offline  
Old 09-26-07, 05:38 PM
  #17  
Maelstrom 
Wood Licker
 
Maelstrom's Avatar
 
Join Date: Apr 2002
Location: Whistler,BC
Posts: 16,966

Bikes: Trek Fuel EX 8 27.5 +, 2002 Transition Dirtbag, Kona Roast 2002

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 23 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Cute tool. Didn't pick up any of my *nix boxes, it did find the ping but could resolve the MAC. thanks
Maelstrom is offline  
Old 09-26-07, 08:21 PM
  #18  
BlastRadius
Direct Hit Not Required
 
BlastRadius's Avatar
 
Join Date: Nov 2003
Location: San Bruno, CA
Posts: 6,193

Bikes: Leopard DC1, Ridley X-Fire, GT Zaskar 9r

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 2 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by Maelstrom View Post
Cute tool. Didn't pick up any of my *nix boxes, it did find the ping but could resolve the MAC. thanks
Huh? How could ping resolve a MAC address, especially a on a remote subnet?
BlastRadius is offline  
Old 09-26-07, 09:59 PM
  #19  
Maelstrom 
Wood Licker
 
Maelstrom's Avatar
 
Join Date: Apr 2002
Location: Whistler,BC
Posts: 16,966

Bikes: Trek Fuel EX 8 27.5 +, 2002 Transition Dirtbag, Kona Roast 2002

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 23 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by BlastRadius View Post
Huh? How could ping resolve a MAC address, especially a on a remote subnet?
No...the ping tool michagander referenced to get the mac address worked really well. It would ping all live servers on the subnet however the it could not get the mac address from the unix boxes. Sorry if my sentence didn't make sense.
Maelstrom is offline  
Old 09-27-07, 08:37 AM
  #20  
michiganboy
Member
 
michiganboy's Avatar
 
Join Date: Jul 2007
Posts: 38

Bikes: Lemond Wayzata, Giant ATX 880, Jamis Dakar

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Any resolution to this?
michiganboy is offline  
Old 09-27-07, 09:34 AM
  #21  
BlastRadius
Direct Hit Not Required
 
BlastRadius's Avatar
 
Join Date: Nov 2003
Location: San Bruno, CA
Posts: 6,193

Bikes: Leopard DC1, Ridley X-Fire, GT Zaskar 9r

Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 2 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
OP said he had access to a Cisco Switch, but in order to find the server in question, he'd need to have access to the switch the server was connected to. MAC addresses are only relevant to the local layer-2 connected devices so the OP will need to have access to "show arp" or "arp -a" on a device local to that server's segment.
BlastRadius is offline  
Old 09-27-07, 02:48 PM
  #22  
DannoXYZ 
Senior Member
 
DannoXYZ's Avatar
 
Join Date: Jul 2005
Location: Saratoga, CA
Posts: 11,739
Mentioned: 1 Post(s)
Tagged: 0 Thread(s)
Quoted: 102 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Can you rsh to this remote server? How is it being managed?
DannoXYZ is offline  
Old 09-28-07, 12:12 PM
  #23  
Old Dirt Hill
Bring That Beat Back
Thread Starter
 
Old Dirt Hill's Avatar
 
Join Date: Oct 2005
Location: I lost my legs
Posts: 937
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Quoted: 0 Post(s)
Likes: 0
Liked 0 Times in 0 Posts
Originally Posted by DannoXYZ View Post
Can you rsh to this remote server? How is it being managed?
I don't manage or have any rights on the server. I could call up that department and have them give me the MAC, but I'm trying to figure out a way to do it myself.

I have many Cisco switches and have no idea where this is plugged in. I'm basically trying to find where it's plugged in, which I can do if I have the MAC address.

The issue I was originally working on has been resolved, but I'm still trying to figure out how to do this in the future.
Old Dirt Hill is offline  
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
rolemodeltom
Singlespeed & Fixed Gear
3
08-15-17 06:01 AM
Abu Mahendra
Bicycle Mechanics
16
10-14-16 09:10 AM
MarkTMO
General Cycling Discussion
6
08-01-11 08:23 PM
patrickgh
Singlespeed & Fixed Gear
4
05-14-08 12:30 PM
hudsong
Singlespeed & Fixed Gear
5
04-20-08 06:12 PM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Thread Tools
Search this Thread

Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright 2018 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.