Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #3464

Re: Lookup of addresses in arpwatch's e-mail notifications?

Date 2015-08-08 20:56 -0700
From Ant <ant@zimage.comANT>
Newsgroups comp.os.linux.networking
Subject Re: Lookup of addresses in arpwatch's e-mail notifications?
References <_8KdnTvKiuQH6iPInZ2dnUU7-WednZ2d@earthlink.com> <9fa6067272e93f89f3d148d97019fd1f@hoi-polloi.org> <op.x2snyybpa3w0dxdave@hodgins.homeip.net> <cpednR3Jv5rS9V7InZ2dnUU7-RGdnZ2d@earthlink.com> <d2hj7eFn3jdU1@mid.individual.net>
Message-ID <kNidnRmoYc74UlvInZ2dnUU7-KWdnZ2d@earthlink.com> (permalink)

Show all headers | View raw


>>>>> Is there a way to look up each address like MAC and IP addresses, so I
>>>>> know whose device/host it is? I am currently using Debian oldstable.
>>>>
>>>> "arp -n"?
>>>
>>> Or "arp -a" (run as root).
>>
>> $ sudo arp -a
>> ? (192.168.1.1) at 84:1b:5e:da:d6:a3 [ether] on eth0
>> ? (192.168.1.15) at 96:10:3e:a3:5a:f4 [ether] on eth0
>>
>> What about showing me brand and names of these devices as shown above?
>
> arp-scan -l -g --interface=eth0

$ sudo arp-scan -l -g --interface=eth0
[sudo] password for ant:
Interface: eth0, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.8.1 with 256 hosts 
(http://www.nta-monitor.com/tools/arp-scan/)
192.168.1.1     84:1b:5e:da:d6:a3       (Unknown)
192.168.1.9     96:10:3e:a3:5a:f4       (Unknown)
192.168.1.10    96:10:3e:a3:5a:f8       (Unknown)
192.168.1.15    00:1f:bc:01:b9:db       EVGA Corporation

11 packets received by filter, 0 packets dropped by kernel
Ending arp-scan 1.8.1: 256 hosts scanned in 1.465 seconds (174.74 
hosts/sec). 9 responded


> netdiscover -i eth0 -r 192.168.1.0/24

$ sudo netdiscover -i eth0 -r 192.168.1.0/24
Currently scanning: Finished!   |   Screen View: Unique Hosts

  16 Captured ARP Req/Rep packets, from 4 hosts.   Total size: 960
 
_____________________________________________________________________________
    IP            At MAC Address      Count  Len   MAC Vendor
 
-----------------------------------------------------------------------------
  192.168.1.1     84:1b:5e:da:d6:a3    01    060   Unknown vendor
  192.168.1.9     96:10:3e:a3:5a:f4    01    060   Unknown vendor
  192.168.1.10    96:10:3e:a3:5a:f8    01    060   Unknown vendor
  192.168.1.15    00:1f:bc:01:b9:db    01    060   EVGA Corporation


Both cannot determine the MAC addresses of my router and other networked 
devices? :(
-- 
"We are anthill men upon an anthill world." --Ray Bradbury
Note: A fixed width font (Courier, Monospace, etc.) is required to see 
this signature correctly.
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )              Chop ANT from its address if e-mailing privately.
Ant is currently not listening to any songs on this computer.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Lookup of addresses in arpwatch's e-mail notifications? ANTant@zimage.com (Ant) - 2015-08-02 15:03 -0500
  Re: Lookup of addresses in arpwatch's e-mail notifications? Anonymous <anonymous@hoi-polloi.org> - 2015-08-03 04:20 +0200
    Re: Lookup of addresses in arpwatch's e-mail notifications? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2015-08-03 09:34 -0400
      Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-06 06:59 -0700
        Re: Lookup of addresses in arpwatch's e-mail notifications? Kirk_Von_Rockstein <Kirk_Von_Rockstein@nowhere.invalid> - 2015-08-06 17:18 +0000
          Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-08 20:56 -0700
            Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-09 05:42 +0000
    Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-06 06:58 -0700
  Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-03 06:06 +0000
    Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-06 07:00 -0700
      Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-07 06:02 +0000
        Re: Lookup of addresses in arpwatch's e-mail notifications? Rick Jones <rick.jones2@hp.com> - 2015-08-07 20:45 +0000
          Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-08 07:15 +0000
            Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-08 21:05 -0700
          Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-08 21:04 -0700
        Re: Lookup of addresses in arpwatch's e-mail notifications? Ant <ant@zimage.comANT> - 2015-08-08 21:02 -0700
          Re: Lookup of addresses in arpwatch's e-mail notifications? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2015-08-09 10:12 +0300
            Re: Lookup of addresses in arpwatch's e-mail notifications? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2015-08-09 07:28 +0000
              Re: Lookup of addresses in arpwatch's e-mail notifications? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2015-08-09 21:34 +0300
  Re: Lookup of addresses in arpwatch's e-mail notifications? Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2015-08-03 06:05 +0000
  Re: Lookup of addresses in arpwatch's e-mail notifications? Dumpsdrive Drive <fromdrive@gmail.com> - 2015-12-19 06:38 -0800

csiph-web