is it possible to get the MAC address for machine using nmap

Question

I have a list of remote machines in a text files  Can I know their MAC addresses using nmap

User · Answer

Use snmp-interfaces nse nmap script  written in lua  to get the MAC address of remote machine like this   nmap -sU -p 161 -T4 -d -v -n -Pn --script snmp-interfaces 80 234 33 182   Completed NSE at 13 25  2 69s elapsed Nmap scan report for 80 234 33 182 Host is up  received user-set  0 078s latency   Scanned at 2014-08-22 13 25 29                       for 3s PORT    STATE SERVICE REASON 161 udp open  snmp    udp-response   snmp-interfaces       eth       MAC address  00 50 60 03 81 c9  Tandberg Telecom AS        Type  ethernetCsmacd  Speed  10 Mbps       Status  up       Traffic stats  1 27 Gb sent  53 91 Mb received     lo       Type  softwareLoopback  Speed  0 Kbps       Status  up       Traffic stats  4 10 Kb sent  4 10 Kb received

User · Answer

if   ping -c 1 192 168 x x    returns   1 packets transmitted  1 received  0  packet loss  time    ms   then you could possibly return the MAC address with arping  but ARP only works on your local network  not across the internet     arping -c 1 192 168 x x  ARPING 192 168 x x from 192 168 x x wlan0 Unicast reply from 192 168 x x  AA BB CC            192 772ms Sent 1 probes  1 broadcast s   Received 1 response s    finally you could use the AA BB CC with the colons removed to identify a device from its vendor ID  for example     grep -i  709E29   usr local share nmap nmap-mac-prefixes  709E29 Sony Interactive Entertainment

User · Answer

With the recent version of nmap 6 40  it will automatically show you the MAC address  example   nmap 192 168 0 1-255   this command will scan your network from 192 168 0 1 to 255 and will display the hosts with their MAC address on your network   in case you want to display the mac address for a single client  use this command make sure you are on root or use  sudo   sudo nmap -Pn 192 168 0 1   this command will display the host MAC address and the open ports   hope that is helpful

User · Answer

Yes  remember using root account                                            qq peliosis    sudo nmap -sP -n xxx xxx xxx  Starting Nmap 6 00   http   nmap org   at 2016-06-24 16 45 CST  Nmap scan report for xxx xxx xxx  Host is up  0 0014s latency    MAC Address  00 13 D4 0F F0 C1  Asustek Computer   Nmap done  1 IP address  1 host up  scanned in 0 04 seconds

User · Answer

I m not cool enough  to be able to comment on a post  so I guess I need to make a new post  However the above recommendation of   sudo nmap -sn 192 168 0 0 24  is the best quickest method to get the all the MACs for the IPs on your local network vlan subnet What the OP doesnt mention  is the only way to get the MAC address  this way  you MUST use sudo or other super user privs i e  windows admin  the command  nmap -sn 192 168 0 0 24  will discover hosts on your network  however will not return the MACs as you are not in SU mode of operation

User · Answer

Some scripts give you what you re looking for   If the nodes are running Samba or Windows  nbstat nse will show you the MAC address and vendor   sudo nmap -sU -script nbstat nse -p137 --open 172 192 10 0 23 -oX 172 192 10 0 xml   grep MAC     awk -F      print  4

User · Answer

If you re using nmap  MAC addresses are only available if you re on the same network segment as the target  Newer versions of nmap will only show the MAC address to you if you re running as root   i e       sudo nmap -sP -n 192 168 0 0 24

User · Answer

Just the standard scan will return the MAC    nmap -sS target

User · Answer

In current releases of nmap you can use   sudo nmap -sn 192 168 0     This will print the MAC addresses of all available hosts  Of course provide your own network  subnet and host id s   Further explanation can be found here

User · Answer

Not using nmap    but this is an alternative     arp -n grep -i B0 D3 93 awk   print  1

User · Answer

nmap can discover the MAC address of a remote target only if   the target is on the same link as the machine nmap runs on  or the target leaks this information through SNMP  NetBIOS etc    Another possibility comes with IPv6 if the target uses EUI-64 identifiers  then the MAC address can be deduced from the IP address   Apart from the above possibilities  there is no reliable way to obtain the MAC address of a remote target with network scanning techniques

[nmap] is it possible to get the MAC address for machine using nmap

Examples related to nmap