in reply to Re: mac to IP address?
in thread mac to IP address?

There is another choice to get the MAC to IP address mappings. I have heard of a utility called arpwatch. It is a daemon that listens to the network and records all the ARP packets it sees. Since ARP is broadcast, the daemon can get a pretty good view of all the mappings on the local subnet. I know arpwatch comes with some Linux distributions.

Replies are listed 'Best First'.
Re: Re: Re: mac to IP address?
by blue_cowdawg (Monsignor) on Jan 27, 2004 at 14:07 UTC

        I have heard of a utility called arpwatch. It is a daemon


        I know arpwatch comes with some Linux distributions.

    I thought of arpwatch but dismissed it for two reasons:

    1. It does not come "standard" everywhere which in my mind is a minor reason to not include it.
    2. Because as you pointed out it is a daemon and not a CLI utility (IIRC) it isn't much use to a Perl programmer.

    There are other utilities as well such as tcpdump and snoop but I think they aren't what the OP had in mind either.

    If what you are after is to take an ETHERNET address and convert it to an IP address "right now" then none of the utilites such as snoop, arpwatch or tcpdump are going to be of much use.


    Peter L. Berghold -- Unix Professional
    Peter at Berghold dot Net
       Dog trainer, dog agility exhibitor, brewer of fine Belgian style ales. Happiness is a warm, tired, contented dog curled up at your side and a good Belgian ale in your chalice.