Top Mud Sites Forum - View Single Post

Teelf · 12-31-2004, 01:52 AM

I've looked into it only briefly in the past, but it seemed to be a non-trivial task. Someone else may have better info for you.

You have to send an ARP packet to request the MAC address of the source machine. That may not be terribly difficult I'm not sure, but the ARP reply packet is not normally passed up to the application layer. So I imagine you have to have some sort of low-level packet capture program running that is looking for the ARP reply.

You'd be dealing with a lot of low-level raw socket type stuff. libpcap may help you in this.

12-31-2004, 01:52 AM	#4
Teelf Member Join Date: Apr 2002 Location: Seattle Posts: 32	I've looked into it only briefly in the past, but it seemed to be a non-trivial task. Someone else may have better info for you. You have to send an ARP packet to request the MAC address of the source machine. That may not be terribly difficult I'm not sure, but the ARP reply packet is not normally passed up to the application layer. So I imagine you have to have some sort of low-level packet capture program running that is looking for the ARP reply. You'd be dealing with a lot of low-level raw socket type stuff. libpcap may help you in this.