Find a machine by MAC address

This post was written by Lior Cohen on May 10, 2008
Posted Under: Articles
You have an ip address but you dont know where the machine is connected
Shmac.rar
if you are lucky and you have a cisco managed switches in your network you can easily use this perl script to know where the machine is connected to based on its MAC address.

easy to find the MAC address by pinging the ip and issue an ‘arp -a’ command to get the mac address of that ip.

the script currently supports Catalyst 2900 3500 and 4500 series switches.
you have the example ini file 2950.ini  which show you the format the script will except, basically it’s: |ip:name or description|

the script will ask for the password for the switches (console password) and not the enable which not needed.
it will ask for the mac address to look for.
you’ll have to reformat the mac address you feed the script from XX-XX-XX-XX-XX-XX to XXXX.XXXX.XXXX

and then it will produce a formated result giving you the switch and the port its connected.

this script is very useful to find new or non documented pc.

i came up with that after i have found an ip address of a dirty pc that had a virus on it and it kept infecting new pc’s in one of the networks i came accross to.

hope it will help you as much as it did for me, any comments will be appreciated you can use the forum freely.

Thanks,

Admin

Add a Comment

You must be logged in to post a comment.

Next Post:
Previose Post: