Re: Determine IP address assigned to MAC



On 13 Jan 2006, in the Usenet newsgroup comp.os.linux.networking, in article
<1137146504.233516.130700@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>, Secure Buddha wrote:

>This ia actually the job of the reverse address resolution
>protocol(rarp). Google for it to find out more information if you so
>desire.

0903 Reverse Address Resolution Protocol. R. Finlayson, T. Mann, J.C.
Mogul, M. Theimer. Jun-01-1984. (Format: TXT=9345 bytes) (Also
STD0038) (Status: STANDARD)

This protocol is handled by a 'rarpd' server that may or may not be part
of the distribution. Red Hat/Fedora has been supplying rarpd-ss981107 for
several years. RFC0903 is widely available on many web server world wide.

>However, this rarp protocol will not apply to your scenario becuase there
>are no static address assignments.

1931 Dynamic RARP Extensions for Automatic Network Address
Acquisition. D. Brownell. April 1996. (Format: TXT=27544 bytes)
(Status: INFORMATIONAL)

Likewise, depending on a user supplied string (here, the MAC address which
can easily be changed) isn't the greatest security feature. RFC1931 should
also be available at the same place you find RFC0903.

>Now this whole process is dependent on a few things:
>
>1. You are capable of sending broadcasts to the internal subnet. It may
>be rejected from a external router or firewall through ingress rules.

1a. The remote systems may not respond to a 'broadcast' ping. Some O/S
do this to avoid DOS or broadcast storms.

>2. Host resident firewalls may deny echo_requests.

However, if the individual address is pinged, the remote hosts will almost
always respond to the ARP request that precedes the ICMP echo. The
exception would be if the remote is filtering on MAC addresses in a modified
network stack. (ARP is normally at a "lower" level in the stack than the
firewall code.) Thus, the "remote" hardware address will almost always be
available in the ARP cache.

Old guy
.



Relevant Pages

  • How to clear or invalidate ARP cache of remote XP
    ... A PC can be connected to a remote nework by either a direct ethernet connection or a WLAN bridge. ... If the direct connection failes, we switch connection to WLAN bridge by reconfiguring the ports of a managed switch and then clearing the local PC's arp cache. ...
    (microsoft.public.win32.programmer.networks)
  • Re: File Synch problem with timestamp
    ... on the local disk, and a remote server. ... I am doing a LIST FILES on the local folder, and a LIST FILES on the ... and if the SOURCE timestamp is greater than ... NTFS uses something like a 100nSec resolution ...
    (comp.lang.labview)
  • Re: Adjusting the Screen
    ... Well, yes, often changing the remote machine's desktop resolution will ... control it-- to a certain degree. ... What's the resolution of the server box, and what's the resolution of the ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Trust domain via VPN
    ... and reverse) for solve the internal name, and two external secondary zone for solve the name of the second domain ... with the ip address, from the first domain to the second one everything work fine, but when i try to browse the network i don't see the remote domain. ... Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net ... How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com ...
    (microsoft.public.win2000.networking)
  • Re: Large resolution / dual head?
    ... > other remote desktop software like PC Anywhere, ... > windows, icons, docked bars, ... ... > resolution on the desktop down to 1024x768 or similar. ...
    (microsoft.public.windowsxp.work_remotely)