Networks
Using a Fluke we have the MAC addresses of the top traffic producers. Is there a quick, small, inexpensive utility that basically does an 'nbtstat -A MAC_Address' to return protocol info. ie. ip_address
I'd prefer not to have to go overboard ona tool for this one thing.
ths
ks
by kevin.square
by cavedweller
This question seems to pop up here every few weeks.
There are a couple of options here. First, if you have a snmp monitor already installed I would search through it's database to locate the nodes in question. This will save you a lot of hunting using the second method. If you don't already have one you might consider getting one. Look at www.winfiles.com, there are some shareware tools you could try.
The other way is to use any workstation (nt or unix) and run the "arp -a" command. This will return a list of ethernet(mac)/internet address pairs. On unix you can pipe the output through grep to select just the mac address in question. A word of caution, however. If there is a router between your node and the node you are looking for you will get the mac address of the router. You will have to start your search again on the other side of the router. You will need to keep doing this until you find the node in question.
Some organizations maintain a database of mac addresses and node names for security purposes. This way they can tell if an unknown computer is masquerading as a legitimate network node. This method would also help you with your problem.
Happy Hunting!
by kevin.square
ARP should work since we know all devices have an ip address as well. It's better than walking to each machine and the servers, although dynamic and temporary, have quite a few in their arp table at any given time.
Now if someone could combine one of the ping-sweep utilites with arp we'd have something really useful.
by kevin.square
This discussion is closed to new replies.
Sort by Trending