Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > Quick Question

Reply
Thread Tools

Quick Question

 
 
inekam@gmail.com
Guest
Posts: n/a
 
      11-03-2006
Hello All

I have a little problem. I have a cat6000 and WS-X6348-RJ-45 connected.
I am trying to find out an ip or a mac for a specific port on that
switch. When i try to do "show cam dynamic 6/29" I get "Total Matching
CAM Entries Displayed =0" show port 6/29 shows me that its an active
connected port. Is there anyway i can find out a mac of the device on
that port or an ip.


Thank you

 
Reply With Quote
 
 
 
 
Walter Roberson
Guest
Posts: n/a
 
      11-03-2006
In article <. com>,
<> wrote:

>I have a little problem. I have a cat6000 and WS-X6348-RJ-45 connected.
>I am trying to find out an ip or a mac for a specific port on that
>switch. When i try to do "show cam dynamic 6/29" I get "Total Matching
>CAM Entries Displayed =0" show port 6/29 shows me that its an active
>connected port. Is there anyway i can find out a mac of the device on
>that port or an ip.


If show cam dynamic does not show the MAC then the device has not
"recently" sent data through the port. Can you ping the device, or
reboot it, or otherwise prod it to use the network? If that isn't
practical, then you may wish to consider spanning the port
to another and using a program such as arpwatch or tcpdump
to monitor for the MAC.
 
Reply With Quote
 
 
 
 
inekam@gmail.com
Guest
Posts: n/a
 
      11-03-2006

Walter Roberson wrote:
> In article <. com>,
> <> wrote:
>
> >I have a little problem. I have a cat6000 and WS-X6348-RJ-45 connected.
> >I am trying to find out an ip or a mac for a specific port on that
> >switch. When i try to do "show cam dynamic 6/29" I get "Total Matching
> >CAM Entries Displayed =0" show port 6/29 shows me that its an active
> >connected port. Is there anyway i can find out a mac of the device on
> >that port or an ip.

>
> If show cam dynamic does not show the MAC then the device has not
> "recently" sent data through the port. Can you ping the device, or
> reboot it, or otherwise prod it to use the network? If that isn't
> practical, then you may wish to consider spanning the port
> to another and using a program such as arpwatch or tcpdump
> to monitor for the MAC.


I see thanks. Is there way i can actualy ping a port? Because since i
have no idea where the device is with out tracing the wire i cant find
it. And i willl try span the port and just monitor it but thats still
pasif is there an active method. Can i flood the port with a request
dhcp or arp. Is there a way to flood a port?

Thanks againe

 
Reply With Quote
 
Walter Roberson
Guest
Posts: n/a
 
      11-03-2006
In article <. com>,
<> wrote:
>
>Walter Roberson wrote:
>> In article <. com>,
>> <> wrote:


>> >I have a little problem. I have a cat6000 and WS-X6348-RJ-45 connected.
>> >I am trying to find out an ip or a mac for a specific port on that
>> >switch. When i try to do "show cam dynamic 6/29" I get "Total Matching
>> >CAM Entries Displayed =0" show port 6/29 shows me that its an active
>> >connected port. Is there anyway i can find out a mac of the device on
>> >that port or an ip.


>I see thanks. Is there way i can actualy ping a port?


Sorry, no.

>Because since i
>have no idea where the device is with out tracing the wire i cant find
>it. And i willl try span the port and just monitor it but thats still
>pasif is there an active method. Can i flood the port with a request
>dhcp or arp. Is there a way to flood a port?


Every broadcast or multicast packet is automatically flooded to every
port that is in the same VLAN. However, whether the device will
bother to respond is not under your remote control.

You could *try* pinging 255.255.255.255, or you could *try* sending
a UDP packet to the broadcast address of each subnet it might be on,
in hopes that the device will choose to respond to something, but
there is no certainty: even without any "firewall" at any level,
it is not uncommon for systems to only respond to traffic to their IP
(or their MAC.)

Does the device definitely have an IP address, in a known range
(even if the exact IP is unknown)? If so then you could
use any of a number of tools to sweep through the entire IP range,
trying an ICMP echo, and attempting a connection that "should"
either get a response or an ICMP unreachable message when you hit the
right IP.

nmap is a useful tool for these kinds of scans. Try first with -sP
(ping scan), then with -P0 -sU -p 35-39
whcih means "do not try ping first", "do a UDP scan" and "probe UDP ports
35-39". If you have root/admin access then you can
-P0 -sT -p 21,22,25,35-39,80 which is similar but TCP ports 21, 22, 25,
35-39, and 80.

 
Reply With Quote
 
inekam@gmail.com
Guest
Posts: n/a
 
      11-06-2006
Thanks for the grate advice i will try your sugestions.

Walter Roberson wrote:
> In article <. com>,
> <> wrote:
> >
> >Walter Roberson wrote:
> >> In article <. com>,
> >> <> wrote:

>
> >> >I have a little problem. I have a cat6000 and WS-X6348-RJ-45 connected.
> >> >I am trying to find out an ip or a mac for a specific port on that
> >> >switch. When i try to do "show cam dynamic 6/29" I get "Total Matching
> >> >CAM Entries Displayed =0" show port 6/29 shows me that its an active
> >> >connected port. Is there anyway i can find out a mac of the device on
> >> >that port or an ip.

>
> >I see thanks. Is there way i can actualy ping a port?

>
> Sorry, no.
>
> >Because since i
> >have no idea where the device is with out tracing the wire i cant find
> >it. And i willl try span the port and just monitor it but thats still
> >pasif is there an active method. Can i flood the port with a request
> >dhcp or arp. Is there a way to flood a port?

>
> Every broadcast or multicast packet is automatically flooded to every
> port that is in the same VLAN. However, whether the device will
> bother to respond is not under your remote control.
>
> You could *try* pinging 255.255.255.255, or you could *try* sending
> a UDP packet to the broadcast address of each subnet it might be on,
> in hopes that the device will choose to respond to something, but
> there is no certainty: even without any "firewall" at any level,
> it is not uncommon for systems to only respond to traffic to their IP
> (or their MAC.)
>
> Does the device definitely have an IP address, in a known range
> (even if the exact IP is unknown)? If so then you could
> use any of a number of tools to sweep through the entire IP range,
> trying an ICMP echo, and attempting a connection that "should"
> either get a response or an ICMP unreachable message when you hit the
> right IP.
>
> nmap is a useful tool for these kinds of scans. Try first with -sP
> (ping scan), then with -P0 -sU -p 35-39
> whcih means "do not try ping first", "do a UDP scan" and "probe UDP ports
> 35-39". If you have root/admin access then you can
> -P0 -sT -p 21,22,25,35-39,80 which is similar but TCP ports 21, 22, 25,
> 35-39, and 80.


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Quick question, hopefully quick answer. ~misfit~ NZ Computing 114 01-06-2005 01:36 PM
Quick question, hopefully quick answer. ~misfit~ NZ Computing 0 12-28-2004 11:55 PM
Quick Question Quick Answer JKop C++ 11 05-24-2004 09:46 PM
Quick Restore for a Compaq not so quick! Croos Bustamunky Computer Support 2 05-15-2004 04:17 AM
PanasonicBQ390 "quick" charger - How quick? Ol' Bab Digital Photography 1 01-17-2004 06:54 AM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57