mailing list archives
RE: NMAP and MAC Addresses
From: "Dario Ciccarone (dciccaro)" <dciccaro () cisco com>
Date: Tue, 12 Feb 2008 19:33:07 -0500
The question shows lack of understanding of how an IP network works.
Local network = ARP, encap L3 on L2, transmit.
Non-local = ARP for default gateway, encap on L2 frame to local gateway,
drop into the wire.
Comer and Stevens, or just Stevens. If on a budget,
So - neither nmap nor any other tool will be able to give you the MAC
address of a device outside your L2 broadcast domain. Well, actually you
can try a "nbtstat -A <ip_address>" for Windows machines.
From: nmap-dev-bounces () insecure org
[mailto:nmap-dev-bounces () insecure org] On Behalf Of Sydie, Colin
Sent: Tuesday, February 12, 2008 7:11 PM
To: nmap-dev () insecure org
Subject: NMAP and MAC Addresses
I need a little help with NMAP. I'm trying to run it on a network in
which I wish to return MAC addresses from every system. These systems
can be anything from Microsoft to Linux to Other. I want to retrieve
everything with a MAC address based on an IP address query.
I can get it to work on the same subnet however; I can't seem to
retrieve MAC addresses from systems on a different subnet. Is there a
way to retrieve MAC addresses from any subnet using NMAP?
Sent through the nmap-dev mailing list
Archived at http://SecLists.Org