how to log client MAC address?

Fima Leshinsky fima at intricately.com
Sun Aug 7 20:34:56 UTC 2016


Thanks to everyone for the helpful replies. Frank - great call on using ARP
cache to match IPs to MAC addresses.

On Sat, Aug 6, 2016 at 7:54 PM, Frank Pikelner <
frank.pikelner at netcraftcommunications.com> wrote:

> For a local subnet, enable BIND logging, then write a script that scans
> the BIND logs for client IP addresses and match those against your BIND
> server's ARP cache (arp -a). Run the script periodically to get your MAC
> addresses. Again only for clients on a local subnet.
>
> ----- Original Message -----
> From: "Dennis Clarke" <dclarke at blastwave.org>
> To: bind-users at lists.isc.org
> Sent: Saturday, 6 August, 2016 19:39:21
> Subject: Re: how to log client MAC address?
>
> On 08/06/2016 10:01 PM, Frank Pikelner wrote:
> > MAC addresses are layer 2 and you only see those on your subnet, i.e.
> > most likely your default gateway, etc.
> >
> > So the answer is no.
>
> Unless he only cares about internal clients on a local subnet.
>
> dc
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20160807/ff1ba435/attachment.html>


More information about the bind-users mailing list