Finding an IP address with Wireshark using ARP requests

Finding an IP address with Wireshark using ARP requests

Address Resolution Protocol (ARP) requests can be used by Wireshark to get the IP address of an unknown host on your network. ARP is a broadcast request that’s meant to help the client machine map out the host network.

ARP is slightly more foolproof than using a DHCP request because even hosts with a static IP address will generate ARP traffic upon startup.

image001.jpg

To get an IP address of an unknown host via ARP, start Wireshark and begin a session with the Wireshark capture filter set to arp, as shown above.

image002.jpg

Then wait for the unknown host to come online. I’m using a cell phone and toggling the WiFi connection on and off. Regardless, when an unknown host comes online it will generate one or more ARP requests. Those are the frames you should look for.

image003.jpg

Once you’ve spotted the request, click on it. Use Wireshark’s Packet details view to analyze the frame. Look at the Address resolution protocol section of the frame, especially the Sender IP address and Sender MAC address.

    • Related Articles

    • Using Baicells L2 Mode

      To change LGW mode, navigate to the Network -> LGW page. In LGW L2 mode, the eNB will create a virtual interface for every UE that attaches. Each virtual interface will then do a DHCP request and create a 1:1 mapping between the UE IP (from Cloud ...

    • Telrad Public to customer setup using breezeview

        Telrad Public to customer setup using breezeview In BreezeView to enable the next field you have to hit TAB key on keyboard to get out of name field and it will unlock the rest of the fields. 1. Go to the EPC and expand the Service Authorization ...

    • Trunk Two MikroTik Switches Using 802.1q Vlans

        Scenario: You have one MikroTik RB250GS switch running 802.1Q vlans and you want to extend all or some of those vlans to a second switch. The following diagram borrowed from a post by Ozelo explains: The configuration of the first switch ...

    • Wireless Uplink for IP Camera

      This is how we use a crossover cable to connect an IP camera to a wireless uplink without a switch.

    • IP Change Tool for Windows 10 and Windows XP

        Download Zip: [1] This tool is for swapping IP addresses quickly when moving from multiple devices that require a static IP to access them. Most Windows 10 default name for the ethernet is Ethernet so it should just work, if not just follow the ...