Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a device set with a static IP and subnet mask. I do not know the IP or subnet mask. How can I find the devices IP and subnet mask?

It is a piece of hardware, not a PC. It will not take an IP from DHCP. I have also tried directly plugging in a LAN cable from my PC to the device with Wireshark running to see if I could capture any packets from the device when it starts or has an Ethernet cable plugged in to it – but there appears to be nothing.

The device appears to be working as it flashes on the Ethernet ports.

Is there any software to do pingsweeps across IPs and networks?

share|improve this question
    
If you tell us what the device is, people might know how to find out without connecting it to the network, or what they are usually set to. –  EightBitTony Jun 25 '11 at 12:28
1  
the device is a proprietary industrial device that was custom made by a europian company. nobody should know what it is. it is the weekend though and cannot get ahold of the company. –  Fase Jun 25 '11 at 12:35
    
The Wireshark should have done it. I would reset the device and just give it the IP you want again. –  KCotreau Jun 25 '11 at 12:37
    
Wireshark will capture all packets even on different networks and without proper default gateways correct? straight Ethernet from PC to device on different networks. –  Fase Jun 25 '11 at 12:41
    
Is it even possible to comunicate with the device if e.g. device ip = 10.0.0.9 while router's ip = 192.168.1.1 ? –  bbaja42 Jun 25 '11 at 15:55

6 Answers 6

up vote 9 down vote accepted

3 steps

  1. Download, install and start wireshark
  2. Connect the device to the computer with the cable
  3. Restart the device (unplug and plug it back to the power line)

In case the device has a static IP, it should(might) broadcast it's IP on the network, which you should detect with the wireshark.

In case the device has dynamic IP set up, it will ask for an IP adress, in which case connecting it to a router or a computer with DHCP server will resolve the issue.

Note, just today I've seen the sys admin use these steps to find out an unknown IP from the device :)

share|improve this answer

You could try Angry IP Scanner or, if you have a Linux server, use arp-scan.

share|improve this answer
1  
I am using this but to manually change my LAN subnet mask over and over again is tiring. –  Fase Jun 25 '11 at 12:26

Try this command, it will ping all possible broadcast addresses.

ping 255.255.255.255
share|improve this answer
    
Does that work in Linux, because it won't in Windows. –  KCotreau Jun 25 '11 at 12:36
    
@KCotreau It does on Unix, yeah, although I'm not so sure if it delivers the right info. –  slhck Jun 25 '11 at 12:37
    
Windows says it cannot ping that address. Guess its Unix only. –  Fase Jun 25 '11 at 12:42

Assuming that it is plugged into a managed switch, find the switch that it is plugged into, and track it down to the specific port. Log into the switch, and look at the mac-address that is associated with that port. In Cisco land, it would be something along the lines of show mac-address-table | i 5/34 where 5/34 is the port that the device is plugged into.

Once you have the mac address of the device, then you can look at the arp tables on the switch, which should show you an IP. Again, in Cisco, it would be something like sh arp | i FFFF where FFFF is the last 4 characters of the device's mac address.

That will get you as far as the IP address. The you should be able to use a tool like wireshark to watch the traffic, and glean the netmask from the traffic.

share|improve this answer
    
I don't have a cisco router or switch. the device is directly attached to a PC. –  Fase Jun 25 '11 at 17:20
    
It is connected to the PC via an ethernet cable? What does your arp table in windows show? –  Kirk Jun 25 '11 at 17:50

In OSes that don't let you ping the all-ones broadcast address (255.255.255.255), you can usually still ping the "All Hosts" multicast address:

ping 224.0.0.1

All IP stacks for two decades have supported multicast, so they should all respond to that, unless they have an overzealous firewall.

share|improve this answer

Use nmap:

Nmap ("Network Mapper") is a free and open source (license) utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and official binary packages are available for Linux, Windows, and Mac OS X. In addition to the classic command-line Nmap executable, the Nmap suite includes an advanced GUI and results viewer (Zenmap), a flexible data transfer, redirection, and debugging tool (Ncat), a utility for comparing scan results (Ndiff), and a packet generation and response analysis tool (Nping).

share|improve this answer
1  
how do I find network nodes with nmap when I don't know the network? –  Fase Jun 25 '11 at 13:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.