RE: [gentoo-user] [OT] Finding other machines on the network

2005-09-13 Thread Daevid Vincent
Related to this, I had a similar situation when I setup up a 'turbonet' card
on my TiVo. 

I built and evolved this web UI: 
http://daevid.com/examples/dhcp/

Source is at bottom of the page. I find it useful to see who's on my
network. My linux box is the firewall and dhcp server.

It uses 'arp'. Works well for my needs. YMMV. 

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread Frank Schafer
On Tue, 2005-08-30 at 17:51 -0500, John Jolet wrote:
 On Aug 30, 2005, at 4:57 PM, Christoph Gysin wrote:
 
  John Jolet wrote:
 
  yeah, if it's got a firewall disallowing icmp responses.  then you  
  can do nmap -P0 to find it.  ping would never find it.  It's gotta  
  have SOME port open.
 
 
  As far as I've read his post, there's no firewall involved. So why  
  should he do portscans in all hosts on the subnet?
 
 
  Also, nmap can do os fingerprinting and probably show you which  
  one is the solaris or sunos machine...
 
 
  Sure, but that's not what he's looking for...
 
 perhaps I read the initial post wrong...I was under the impression  
 that he had a headless sun box with a static ip on a known subnet,  
 but the exact ip wasn't known.

... what about arp?

Just a thought
Frank
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread Nick Rout
On Wed, 2005-08-31 at 08:38 +0200, Frank Schafer wrote:
 On Tue, 2005-08-30 at 17:51 -0500, John Jolet wrote:
  On Aug 30, 2005, at 4:57 PM, Christoph Gysin wrote:
  
   John Jolet wrote:
  
   yeah, if it's got a firewall disallowing icmp responses.  then you  
   can do nmap -P0 to find it.  ping would never find it.  It's gotta  
   have SOME port open.
  
  
   As far as I've read his post, there's no firewall involved. So why  
   should he do portscans in all hosts on the subnet?
  
  
   Also, nmap can do os fingerprinting and probably show you which  
   one is the solaris or sunos machine...
  
  
   Sure, but that's not what he's looking for...
  
  perhaps I read the initial post wrong...I was under the impression  
  that he had a headless sun box with a static ip on a known subnet,  
  but the exact ip wasn't known.
 
 ... what about arp?

That was the answer given in an alomst identical problem recently on
this list (or was it another??)

arp will rely on the box having actually done something within arp's
cache period.

if there is no network activity, there may be no arp entry.

 
 Just a thought
 Frank
-- 
Nick Rout [EMAIL PROTECTED]

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread Destromy
Nick Rout wrote:

On Wed, 2005-08-31 at 08:38 +0200, Frank Schafer wrote:
  

On Tue, 2005-08-30 at 17:51 -0500, John Jolet wrote:


On Aug 30, 2005, at 4:57 PM, Christoph Gysin wrote:

  

John Jolet wrote:



yeah, if it's got a firewall disallowing icmp responses.  then you  
can do nmap -P0 to find it.  ping would never find it.  It's gotta  
have SOME port open.

  

As far as I've read his post, there's no firewall involved. So why  
should he do portscans in all hosts on the subnet?




Also, nmap can do os fingerprinting and probably show you which  
one is the solaris or sunos machine...

  

Sure, but that's not what he's looking for...



perhaps I read the initial post wrong...I was under the impression  
that he had a headless sun box with a static ip on a known subnet,  
but the exact ip wasn't known.
  

... what about arp?



That was the answer given in an alomst identical problem recently on
this list (or was it another??)

arp will rely on the box having actually done something within arp's
cache period.

if there is no network activity, there may be no arp entry.

  

Just a thought
Frank


ping broadcast ?
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread Nick Rout
On Wed, 2005-08-31 at 16:42 +0800, Destromy wrote:
 
 
 ping broadcast ?

now we are going in circles.

not every device responds to ping - its optional in linux and people
often turn it off because of various DOS attacks based on icmp.

also some OSes don't seem to respond to broadcast ping, even though they
respond to ping to their own address, windows being an example.

So, all techniques in this thread seem to have validity, but not all of
them will work in all circumstances.

-- 
Nick Rout [EMAIL PROTECTED]

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread John Jolet


On Aug 31, 2005, at 1:38 AM, Frank Schafer wrote:



... what about arp?



If this machine has the mac address listed on the outside of the  
case, or he opens it up to look at the card, sure.  if you don't know  
what the mac address isthen you're stuck.  Of course, if it's a  
small, home network, you could always just turn off all the other  
computers except that one and the one you're on and ask the router  
who's connected.  be quicker just to launch nmap and go get some coffee.

--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread Nick Rout
On Wed, 2005-08-31 at 05:50 -0500, John Jolet wrote:
 On Aug 31, 2005, at 1:38 AM, Frank Schafer wrote:
 
 
  ... what about arp?
 
 
 If this machine has the mac address listed on the outside of the  
 case, or he opens it up to look at the card, sure.  if you don't know  
 what the mac address isthen you're stuck. 

Not necessarily. If the machine has had network activity it may be shown
by arp -e.

If you have a smallish network and can identify the other machines, its
a matter of elimination. i.e. you look at the list of IP addresses shown
by arp -en and eliminate the ones you know. 

  Of course, if it's a  
 small, home network, you could always just turn off all the other  
 computers except that one and the one you're on and ask the router  
 who's connected.  be quicker just to launch nmap and go get some coffee.
-- 
Nick Rout [EMAIL PROTECTED]

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread Anthony Walters

Andrew Lowe wrote:

Hi all,
I have the situation where I've been loaned an old Sun SPARC box for 
some work. It has a static IP somewhere in the 192.168.0.* range, which 
my home network also is in. My question is, how can I find out the IP 
address of the machine? 


if it is pingable then

emerge fping
and
fping -g 192.168.0.0/24

--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread Matthias Bethke
Hi Nick,
on Wednesday, 2005-08-31 at 20:30:14, you wrote:
 arp will rely on the box having actually done something within arp's
 cache period.

What's more, ARP resolves IP addresses to MAC addresses and the IP
address is what the OP wanted to find out in the first place.
I'd try in this order:
1. Broadcast ping
2. for n in `seq 1 254`; do ping /dev/null -c1 -W1 192.168.0.$n; \
[ $? == 0 ]  echo $n is up; done
3. nmap

cheers!
Matthias
-- 
I prefer encrypted and signed messages.   KeyID: 90CF8389
Fingerprint: 8E 1F 10 81 A4 66 29 46  B9 8A B9 E2 09 9F 3B 91


pgpbm2KbnPfNZ.pgp
Description: PGP signature


Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-31 Thread Frank Schafer
If some other machine wants to communicate with some second other
machine ... say secmachine.homenet.com it connects to the DNS server of
homenet.com. (This step won't be done if IP addresses are in use.

The DNS server then sends the IP address to firstmachine.homenet.com or
firstmachine uses the known one.

Next firstmachine will broadcast an ARP whois ip.of.sec.srv request.
sec.srv or secmachine will answer with an ARP reply which contains the
IP and the MAC address.

Firstmachine then initiates the communication using this MAC address.

Don't forget. The transport layer is ETHERNET. There don't exist IP
addresses.

Just for clarification.

arp will do exactly this and arpd can even collect such information
because every machine on a subnet will see all of the requests and
replies.

Regards
Frank


On Wed, 2005-08-31 at 05:50 -0500, John Jolet wrote:
 On Aug 31, 2005, at 1:38 AM, Frank Schafer wrote:
 
 
  ... what about arp?
 
 
 If this machine has the mac address listed on the outside of the  
 case, or he opens it up to look at the card, sure.  if you don't know  
 what the mac address isthen you're stuck.  Of course, if it's a  
 small, home network, you could always just turn off all the other  
 computers except that one and the one you're on and ask the router  
 who's connected.  be quicker just to launch nmap and go get some coffee.
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread Andrew Lowe

Hi all,
	I have the situation where I've been loaned an old Sun SPARC box for 
some work. It has a static IP somewhere in the 192.168.0.* range, which 
my home network also is in. My question is, how can I find out the IP 
address of the machine? I've forgotten what it is and it's also headless 
with no keyboard. Is there a utilitiy in portage that will try all of 
the ip addresses in a range and let me know if something it at the other 
end, ie something like automatically pinging all of the addresses in a 
range and reporting what addresses responded?


Any thoughts greatly appreciated,
Andrew
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread John Jolet
emerge nmap
On Tuesday 30 August 2005 09:51, Andrew Lowe wrote:
 Hi all,
   I have the situation where I've been loaned an old Sun SPARC box for
 some work. It has a static IP somewhere in the 192.168.0.* range, which
 my home network also is in. My question is, how can I find out the IP
 address of the machine? I've forgotten what it is and it's also headless
 with no keyboard. Is there a utilitiy in portage that will try all of
 the ip addresses in a range and let me know if something it at the other
 end, ie something like automatically pinging all of the addresses in a
 range and reporting what addresses responded?

   Any thoughts greatly appreciated,
   Andrew

-- 
John Jolet
Your On-Demand IT Department
512-762-0729
www.jolet.net
[EMAIL PROTECTED]
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread fire-eyes
On Wed, 2005-08-31 at 00:51 +1000, Andrew Lowe wrote:
 Hi all,
 I have the situation where I've been loaned an old Sun SPARC
 box for 
 some work. It has a static IP somewhere in the 192.168.0.* range,
 which 
 my home network also is in. My question is, how can I find out the IP 
 address of the machine? I've forgotten what it is and it's also
 headless 
 with no keyboard. Is there a utilitiy in portage that will try all of 
 the ip addresses in a range and let me know if something it at the
 other 
 end, ie something like automatically pinging all of the addresses in
 a 
 range and reporting what addresses responded?

Nmap is what you want. It can do far more advanced things, too. But to
do a simple ping sweep (and portscan anything that it finds, which will
then reveal the IP):

nmap -T4 -F 192.168.0.*

You may need to tell it 192.168.0.0/24 instead.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread Martin Marcher
Dienstag 30 August 2005 16:51, Andrew Lowe:
 Is there a utilitiy in portage that will try all of
 the ip addresses in a range and let me know if something it at the other
 end, ie something like automatically pinging all of the addresses in a
 range and reporting what addresses responded?

if it pings:

nmap -sP 192.168.0.1-254

hth


pgpX0LUEDAIaJ.pgp
Description: PGP signature


Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread Bastian Balthazar Bux
Andrew Lowe wrote:
 Hi all,
 I have the situation where I've been loaned an old Sun SPARC box for
 some work. It has a static IP somewhere in the 192.168.0.* range, which
 my home network also is in. My question is, how can I find out the IP
 address of the machine? I've forgotten what it is and it's also headless
 with no keyboard. Is there a utilitiy in portage that will try all of
 the ip addresses in a range and let me know if something it at the other
 end, ie something like automatically pinging all of the addresses in a
 range and reporting what addresses responded?
 
 Any thoughts greatly appreciated,
 Andrew

If it reply to broadcast query this can give an answer:

#ping -b -c1 192.168.0.255

well, many answer, exclude the known ip and try the remaining ones.
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread John Jolet
yeah, if it's got a firewall disallowing icmp responses.  then you can do nmap 
-P0 to find it.  ping would never find it.  It's gotta have SOME port open.  
Also, nmap can do os fingerprinting and probably show you which one is the 
solaris or sunos machine...

On Tuesday 30 August 2005 10:12, Christoph Gysin wrote:
 Andrew Lowe wrote:
  Hi all,
  I have the situation where I've been loaned an old Sun SPARC box for
  some work. It has a static IP somewhere in the 192.168.0.* range, which
  my home network also is in. My question is, how can I find out the IP
  address of the machine? I've forgotten what it is and it's also headless
  with no keyboard. Is there a utilitiy in portage that will try all of
  the ip addresses in a range and let me know if something it at the other
  end, ie something like automatically pinging all of the addresses in a
  range and reporting what addresses responded?
 
  Any thoughts greatly appreciated,
  Andrew

 A simple for loop around ping would do the trick. Am I missing something?

 Christoph
 --
 echo mailto: NOSPAM !#$.'*'|sed 's. ..'|tr * !#:2 [EMAIL PROTECTED]

-- 
John Jolet
Your On-Demand IT Department
512-762-0729
www.jolet.net
[EMAIL PROTECTED]
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread Uwe Thiem
On 30 August 2005 15:51, Andrew Lowe wrote:
 Hi all,
   I have the situation where I've been loaned an old Sun SPARC box for
 some work. It has a static IP somewhere in the 192.168.0.* range, which
 my home network also is in. My question is, how can I find out the IP
 address of the machine? I've forgotten what it is and it's also headless
 with no keyboard. Is there a utilitiy in portage that will try all of
 the ip addresses in a range and let me know if something it at the other
 end, ie something like automatically pinging all of the addresses in a
 range and reporting what addresses responded?

Can't you remote log in and do ifconfig?

Uwe

-- 
95% of all programmers rate themselves among the top 5% of all software 
developers. - Linus Torvalds

http://www.uwix.iway.na (last updated: 20.06.2004)
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread Christoph Gysin

John Jolet wrote:
yeah, if it's got a firewall disallowing icmp responses.  then you can do nmap 
-P0 to find it.  ping would never find it.  It's gotta have SOME port open.  


As far as I've read his post, there's no firewall involved. So why should he do portscans in all 
hosts on the subnet?


Also, nmap can do os fingerprinting and probably show you which one is the 
solaris or sunos machine...


Sure, but that's not what he's looking for...

Christoph
--
echo mailto: NOSPAM !#$.'*'|sed 's. ..'|tr * !#:2 [EMAIL PROTECTED]
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] Finding other machines on the network

2005-08-30 Thread John Jolet


On Aug 30, 2005, at 4:57 PM, Christoph Gysin wrote:


John Jolet wrote:

yeah, if it's got a firewall disallowing icmp responses.  then you  
can do nmap -P0 to find it.  ping would never find it.  It's gotta  
have SOME port open.




As far as I've read his post, there's no firewall involved. So why  
should he do portscans in all hosts on the subnet?



Also, nmap can do os fingerprinting and probably show you which  
one is the solaris or sunos machine...




Sure, but that's not what he's looking for...

perhaps I read the initial post wrong...I was under the impression  
that he had a headless sun box with a static ip on a known subnet,  
but the exact ip wasn't known.

--
gentoo-user@gentoo.org mailing list