|
Posted by ScreamingMan on July 27, 2005, 8:47 am
If you were Registered and logged in, you could reply and use other advanced thread options
Hello,
Might be the wrong group, but...
Is is possible, without having preinstalled tracing software, and
knowing the hardware address of the ethernet card, to trace a laptop? In
other words, can one find the IP address that the laptop is accessing the
web through?
Thanks
remove "spam" when replying
|

| |
Posted by on July 27, 2005, 10:41 am
If you were Registered and logged in, you could reply and use other advanced thread options
> Is is possible, without having preinstalled tracing software, and
>knowing the hardware address of the ethernet card, to trace a laptop? In
>other words, can one find the IP address that the laptop is accessing the
>web through?
No, the MAC address disappears at the first {router,cable or DSL
modem,switch,device} that the packets hit.
|
|
Posted by James Knott on July 27, 2005, 12:40 pm
If you were Registered and logged in, you could reply and use other advanced thread options
William P. N. Smith wrote:
> No, the MAC address disappears at the first {router,cable or DSL
> modem,switch,device} that the packets hit.
Not quite. Switches and other level two devices do not discard the MAC.
Routers do. DSL is bit different, in that you usually have two different
connections going over the line. One is the original ethernet connection
to the modem, which will contain the MAC. The other is the PPPoE or PPPoA
connection, which does not contain the MAC.
|
|
Posted by James Knott on July 27, 2005, 12:36 pm
If you were Registered and logged in, you could reply and use other advanced thread options
ScreamingMan wrote:
> Hello,
>
> Might be the wrong group, but...
>
> Is is possible, without having preinstalled tracing software, and
> knowing the hardware address of the ethernet card, to trace a laptop? In
> other words, can one find the IP address that the laptop is accessing the
> web through?
I'm not quite sure what you're asking for. If you have any communication
with another computer, it's MAC address will be in your arp cache, for a
period of time. You could run a script on your router, to scan the apr
cache for the desired MAC address. Beyond that, you'll have to use some
analyser app, such as ethereal at some point where the data passes. With
the old non-switched ethernet, you could do that from anywhere on the
network. Now, you'd likely have to do it at the router leading to the ISP
or with a switch that provides port monitoring. Also, once a packet passes
through a router, the original MAC is lost.
|
|
Posted by Patrick Schaaf on July 27, 2005, 1:57 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> Is is possible, without having preinstalled tracing software, and
>knowing the hardware address of the ethernet card, to trace a laptop? In
>other words, can one find the IP address that the laptop is accessing the
>web through?
On the router which connects to the LAN that the laptop is plugged
in, you can look at the ARP table to find this information (if the
laptop has been active recently). If you don't have access to that
router, you are pretty much out of luck, as the Ethernet "hardware address"
has local network significance only, and is usually not transported on
further hops.
Also note that it is trivial to make any node use a different
hardware address, by simple configuration.
best regards
Patrick
|
| Similar Threads | Posted | | usb wireless cards/adapters for laptop | November 2, 2007, 6:30 pm |
| 10/100 Ethernet Differential Pairs PCB Trace Length | April 15, 2008, 2:56 pm |
| Simplest hardware node | November 24, 2005, 1:17 am |
| Hardware/Software setup | March 28, 2007, 3:07 pm |
| Looking for open-source home DSL gateway software & hardware to run it | November 1, 2007, 10:38 am |
| MAC address of an IPv6 address | April 10, 2007, 4:42 pm |
| Valid mac address | February 7, 2006, 8:21 pm |
| Change MAC address | June 20, 2007, 7:19 am |
| MAC destination address | July 19, 2007, 12:06 am |
| Change IP and MAC address | December 10, 2007, 4:59 am |
|
|