Discussion Locked

mac address to ip

0 helpful
17 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Using netmon on a w2k server, we have identified one particular mac address as a culprit of many broadcasts. Is there any way to resolve a mac address to an netbios name? Barring that, we can alway resolve a netbios name to an ip address using WINS,so can we resolve a mac address to an ip address (static or dynamic)?

17 replies

by eha

that will only give mac and ip address for the machine you are on. how about the other macs on the network? i need the ip address or netbios name of a particular mac, not just the one i happen to be on at the time!

by pesk, mbcs, mcse, mcitp, sts

By typing [ ARP -a IPxxx.xxx.xxx.xxx ] from a command line (Start, Run, CMD.exe/command.com), the protocol data will be interrogated and will report that particular IP address's physical (or MAC) address. If you leave out the IP address at the end all nodes on the same network that use ARP (Address Resolution Protocol) will have their corresponding IP and physical addresses displayed.

by timwalsh

One additional comment to add to Answer 2:

The ARP command will give you answers from the ARP table of the local computer. Only information relating to other computers that directly communicate with a given computer will get stored in that computers ARP table.

Also, given that you only no the MAC address to begin with, typing will print the entire ARP table to screen. You must then manually search the results for the MAC address in question.

Therefore you need to run the ARPcommand froma computer that ALL other computers communicate with, such as a Domain Controller (or the DHCP server if IP addresses are assigned dynamically).

This will only resolve an IP address to a MAC address. I know of no tool that will resolve a MAC address directly to a NetBIOS name

by curlergirl

I think this command will do what you want:

nbtstat -a [machine name]

Or, if you have the IP address and not the name, you can use:

nbtstat -A [ip address]

This will return the IP address, NetBIOS name table and mac address of the remotemachine.

Hope this helps!

by joseph moore

No, the WINS server will not help with MAC addressing.
If you run a DHCP server, you could look in there. DHCP does associate MAC address with assigned IP address. So, that could tell you.

Other then that, I agree with checking the ARP cache. Do you run a switch that you can connect to via Telnet or a console cable? If so, then you could check the arp cache on the switch (SH ARP) and look there. A router might also contain this info, depending on if other gateways or proxy servers are used.

by gigelul

I downloaded a VBS script (NetInventory.vbs), but I don't remember from where. If you contact me I can send you this file. This script will scan the entire network and will create an excel file with MAC addresses, IP and HostName.

This discussion is closed to new replies.