[ale] Find IP-address from MAC address

Rene Rasmussen ale at ras-world.dk
Thu Sep 1 03:39:35 EDT 2005


On Tuesday 30 August 2005 23:08, Jim Popovitch wrote:
> Again, this only works if other hosts reply to ICMP.  "-sP" is nmap
> parameter for "ping scan".   If you want to locate possible hosts that
> ignore/drop ICMP, then do this:
>
>    nmap -P0 -sU 192.168.2.1-254
>
> The above takes longer, but is more thorough.   -P0 means to don't try
> pinging, -sU is for UDP scans (instead of TCP).  IMHO you will find more
> hidden hosts with UDP than with TCP scans.  YMMV.
>
> Also try adding -v (verbose) and -T5 (no holds barred).
Thanks for the hints. I will put together a script to scan the network.
I think the script should do the following:

1. Set own IP-address. (x.x.x.1)
2. Use Nmap to scan the network. (x.x.x.2-254 in a class C network)
3. Stop and tell the user if a machine is found.
4. Set own IP-address. (x.x.x.2)
5. Use Nmap to scan the remaining address. (x.x.x.1)
6. Stop and tell the user if a machine is found.
7. Start from 1. again.

Did I miss something? Is there a smarter way to construct the script?

I have a machine and a crossover cable I'm gonna use. This negates the 
possibility of false hits.


Thanks again.

Regards,
Ren?



More information about the Ale mailing list