Re: NMAP and MAC Addresses

[Brandon Enright <bmenrigh () ucsd edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Your right, of course.  I'll point out though that Nmap does have
nbstat.nse for trying to divine MAC addresses from Windows boxes.

And then outside of Nmap, there is always SNMP to query the router for a
given VLAN.

Brandon


On Tue, 12 Feb 2008 19:33:07 -0500
"Dario Ciccarone (dciccaro)" <dciccaro () cisco com> wrote:

> The question shows lack of understanding of how an IP network works.
>
> Local network = ARP, encap L3 on L2, transmit.
>
> Non-local = ARP for default gateway, encap on L2 frame to local
> gateway, drop into the wire.
>
> Comer and Stevens, or just Stevens. If on a budget,
> http://www.redbooks.ibm.com/Redbooks.nsf/RedbookAbstracts/gg243376.html
>
> So - neither nmap nor any other tool will be able to give you the MAC
> address of a device outside your L2 broadcast domain. Well, actually
> you can try a "nbtstat -A <ip_address>" for Windows machines.
>
> Dario
>  

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD8DBQFHsjvzqaGPzAsl94IRAv05AJ9GNmPF/I38P45EmttpnnS7k5H/FwCgkR3N
HVsbZMnVM1dNZAwTnXD5+t8=
=eX02
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org