[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] MAC to IP conversion
If you are using DHCP, the MAC address is the unique identifier unless
you are using DHCP client ID's (which generate a seperate hex code for
unique ID)...scan through your DHCP logs for the MAC......
Sometimes you need to look at the easy answers 8-)
-Mike
On Friday, October 11, 2002, at 03:56 AM, Symon Thurlow wrote:
> If you are using swithces you will need to set a port monitor and
> configure it to recieve traffic for all the ports.
>
> I normally set this up at the install stage and inform the customer,
> but your managed service provider may not have done this.
>
> If this isn't the case at your site, I guess you could always hang a
> hub off the port that has the target of your syn attacks on it, and
> add your protocol analyzer to the same hub
>
> Symon
>
>
> -----Original Message-----
> From: Roland Rosenbach [mailto:[email protected]]
> Sent: 11 October 2002 05:42
> To: [email protected]
> Subject: Re: [FW-1] MAC to IP conversion
>
> yep cisco switchs but unfortuately they are outsourced..
> no access....
>
> looks like sniffers are the go....
>
> -----Original Message-----
> From: Damien Hart [mailto:[email protected]]
> Sent: Friday, October 11, 2002 1:22 PM
> To: [email protected]
> Subject: Re: [FW-1] MAC to IP conversion
>
> Do you have cisco switches? If you do use the "show mac" command to
> see which port it is in and figure it out from there
>
> Damo
>
>
> arp -a only shows IP and MAC associations within the same subnet
> as the machine issuing the command.
>
> how does one do a RARP for a IP address outside the subnet one is in?
>
> -----Original Message-----
> From: erik witkop [mailto:[email protected]]
> Sent: Friday, October 11, 2002 11:10 AM
> To: [email protected]
> Subject: Re: [FW-1] MAC to IP conversion
>
> you are describing RARP, reverse arp. see if you can find an app that
> will do that for you. if not, get pinging. :-)
>
> ----- Original Message -----
> From: Jalen, Ken
> To: [email protected]
> Sent: Thursday, October 10, 2002 7:07 PM
> Subject: Re: [FW-1] MAC to IP conversion
>
> I tried this, but it only shows the MACs and IP that are in my arp
> cache. I'm looking for a way to broadcast the MAC and get a return IP
> number.
>
>
> -----Original Message-----
> From: Hal Dorsman [mailto:[email protected]]
> Sent: Thursday, October 10, 2002 3:25 PM
> To: [email protected]
> Subject: Re: [FW-1] MAC to IP conversion
>
> arp -a
>
>
> -----Original Message-----
> From: Jalen, Ken [mailto:[email protected]]
> Sent: Thursday, October 10, 2002 3:45 PM
> To: [email protected]
> Subject: [FW-1] MAC to IP conversion
>
> Hello,
>
> I have FW-1 4.1 with the Realsecure server. I keep on getting
> SYN-flood from within my network. I have the MAC address of the
> offending device. How do I go about getting the IP from the MAC?
>
> Thanks
>
> Ken Jalen
> Saltriver Pima-Maricopa Indian Community
> 10,005 E.Osborn RD
> Scottsdale,AZ 85256
> Network Administrator
>>FAX
> [email protected]
> [email protected]
>
>
>
>
> **********************************************************************
>
> CONFIDENTIAL COMMUNICATION
> This e-mail and any files transmitted with it is intended solely for
> the use of the
> individual or entity to whom it is addressed. If you are not the
> intended recipient,
> or the person responsible for delivering the e-mail to the intended
> recipient, please
> immediately notify the sender by e-mail and delete the original
> transmission and its
> contents. Any use, dissemination, forwarding, printing, or copying of
> this e-mail and
> any file attachments is prohibited.
>
> **********************************************************************
>
>
>
> #######################################################################
> ##############
> Scanned for Viruses and Content and cleared by the Webvein Mail
> Gateway
> #######################################################################
> ##############
>
>
______________________________________
Michael Perbix
Lower Merion School District
Telecommunications Specialist
Phone:Fax:=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================