RE: IP to MAC mapping

["Burton M. Strauss III" <bstrauss3 () attbi com>]

Understand that most OSes (perhaps not windows, but I wouldn't put it past
having a registry key somewhere) allow you to set the MAC address to
anything you want it to be...  So all you would find would be casual
crashers...

Set up a small Linux or *nix box and use arpwatch - it's a daemon that
monitors the network and can email you with changes.

-----Burton

-----Original Message-----
From: Johan Denoyer [mailto:jdenoy () digital-connexion info]
Sent: Wednesday, November 20, 2002 11:50 AM
To: security-basics () securityfocus com
Subject: IP to MAC mapping


Hi,

we are currently looking into illegal usage of a protected network. We are
managing a class C network, and we would like to be able to detect illegal
usage of the network by finding the MAC address of the ip address used and
then checking it against a database.

Now I would like to find a software or a perl scrip that would do the work.
(The budget that we have is 0$, so freeware is likely to be the solution)

I have tried doing searches using google without any luck. If anyone uses
such software, please tell me which one, and where I can find it.

Thanks,


Salutations,

Johan Denoyer
jdenoy () digital-connexion info
Digital Connexion
http://www.digital-connexion.info
PGP : 0x57A6727B