RARP Tool

[jasimpson]

I wonder if anyone can help me with this.

I have a machine on my network (of about 100 machines) that apepars to be generating alot of network traffic. Unfortunately my network monitor just shows its mac address rather than its ip address which means that I cannot work out which machine it is.

I have been told that what I really need is a RARP tool (reverse ARP) to resolve the mac address to an IP address but all the ones i have found so far appear to be for unix or linux which we don't run.

Does anyone know a good RARP tool for Windows? Or a different way to resolve this mac address to it's ip address?

Thanks,

James.

[Tuttle]

Quick workaround using built-in Windows tools (assuming you're using 192.168.1.* and xx-xx-xx-xx-xx-xx is the problem MAC address in lowercase):for /l %i in (1,1,254) do ping -n 1 -w 1 192.168.1.%i
arp -a | find "xx-xx-xx-xx-xx-xx"The top line sends out a bunch of pings but doesn't stop to wait for the responses (the response packets will still populate the ARP table). The second line prints the arp table (which should at that point contain all the active machines on your network) and finds the line you're interested in.

[jasimpson]

Excellent, that works just great.

Thanks for your help.

James.