Can I trap MAC of TCP/IP login?

[Huy Vu_1]

Hi all,

Is there a way to trap the MAC address of TCP/IP connection to our HP-UX 10.20
server for some specific users?

For example to locate the MAC address of PC.domain.com was login as 'root' to
the server.

It will be difficult to catch if the user dialin to the NT network and telnet
to the Unix server after.

What is the best way to locate this user?

Thanks in advance for any advice.

Huy Vu.

[Anthony Goonetilleke_1]

You will have to do a little bit of work with this but just off the top of my
head you could do somthing like this

#!/bin/sh
# USAGE: macget.sh IPADDRESS
/usr/sbin/ping $1 -n 1 > /dev/null
/usr/sbin/arp -a | grep -i $1 | awk '{print $4}'

with a little bit of work you can use this to get the mac address of any user
you want if you know what their IP address is.

regards,
AG

[Anthony Goonetilleke_1]

One thing I forgot to mention is that you are restricted to getting MAC
addresses of hosts in your own subnet as the others dont get stored in the arp
cache.

[Zhang Zhao gui]

For those nodes outside your current subnet,even they have not logined into
your server or worksation, you can still find out MAC if you have OpenView
NNM installed.