当前位置: 首页 > 工具软件 > arp-scan > 使用案例 >

linux 不同ip 相同mac arp,linux – nmap和arp-scan不一致的IP-MAC结果

后焕
2023-12-01

我似乎使用nmap或arp-scan从特定机器获得IP / MAC地址的可变和不一致结果.

该机器有3个接口,这就是它所显示的:

$uname -a

Linux showstore-81 2.6.35.13 #1 SMP PREEMPT Thu Feb 9 12:20:36 PST 2012 i686 GNU/Linux

$LC_ALL=C /sbin/ifconfig

eth0 Link encap:Ethernet HWaddr 00:1b:21:ac:17:19

inet addr:192.168.81.54 Bcast:192.168.81.255 Mask:255.255.255.0

...

eth1 Link encap:Ethernet HWaddr 00:25:90:25:d0:4e

inet addr:192.168.81.129 Bcast:192.168.81.255 Mask:255.255.255.128

...

eth2 Link encap:Ethernet HWaddr 00:25:90:25:d0:4f

inet addr:169.254.1.1 Bcast:169.254.255.255 Mask:255.255.0.0

...

所以无论我使用什么工具和选项,我都期望:

> IP .54 => MAC 00:1b:21:ac:17:19

> IP .129 => MAC 00:25:90:25:d0:4e

但是nmap -n -sP 192.168.81.0/24(nmap v.5.00)报告它反转:

Host 192.168.81.54 is up (0.000078s latency).

MAC Address: 00:25:90:25:D0:4E (Super Micro Computer)

Host 192.168.81.129 is up (0.000058s latency).

MAC Address: 00:1B:21:AC:17:19 (Intel Corporate)

并且nmap -n -sP -PR 192.168.81 / 24仅报告两个IP上的一个MAC地址:

Host 192.168.81.54 is up (0.000081s latency).

MAC Address: 00:1B:21:AC:17:19 (Intel Corporate)

Host 192.168.81.129 is up (0.00011s latency).

MAC Address: 00:1B:21:AC:17:19 (Intel Corporate)

最后,arp-scan -l(v.1.8.1)使用两个MAC地址报告两次IP地址:

192.168.81.54 00:1b:21:ac:17:19 Intel Corporate

192.168.81.54 00:25:90:25:d0:4e Super Micro Computer,Inc.

192.168.81.129 00:1b:21:ac:17:19 Intel Corporate

192.168.81.129 00:25:90:25:d0:4e Super Micro Computer,Inc.

如何进行扫描以获得正确的结果? (我只需要IP和MAC.没有端口扫描.)

 类似资料: