17

I’ve connected my working computer with another one using a direct Ethernet cable. The other machine is a desktop computer that has no peripherals (including keyboard, mouse, and monitor) attached and I want to access it using RDP and SMB. The IP addresses are auto-configured, so it gets something in the range 169.254.x.x.

I can wait until Windows recognizes the other machine or scan IP addresses but both take long and unpredictable amount of time. Is there any faster way to recognize the machine on the other end of a direct Ethernet cable? I’ve thought about making a broadcast “Ethernet ping” and reverse ARP but cannot find any instructions for this technique.

6

At the moment you connect both computers together, they will try to find a DHCP server. After some seconds the request will timeout and the computer will asign a auto-configurated address to itself. The host will then randomly assign itself a link-local ip-address and broadcasts an arp request over the network to see if its in use

The above is a rewritten summary of https://en.wikipedia.org/wiki/Link-local_address

We can use <any> packet capturing tool to capture those packets and print the ip-addresses of those ARP requests.

Capturing arp packets using wireshark GUI (all platforms)

  1. Capture on all interfaces: yes (alternatively, select the correct interface if you understand it)
  2. Capture filter: arp
  3. Start the capture and look for at the right column for the ip addresses of YOUR pc and the OTHER pc

Capturing arp packets using cli tcpdump (Tested on Linux)

  1. Start/login to a terminal interface
  2. Run the program "sudo tcpdump arp"
  3. Ip addresses of YOUR pc and the OTHER pc will show on the screen
16

A broadcast IP ping might work – not all systems answer to it, but some do when in 169.254 mode. Try ping 169.254.255.255 (needs -b on Linux), or ping ff02::1 (needs ping6 on Linux and possibly a scope such as ff02::1%eth0).

Directly sending a NetBIOS name lookup (using nbtstat -a) might work, if it runs Windows and if you know the computer name. I don't know a LLMNR equivalent.

The 169.254 autoconfiguration involves sending some ARP probes with the host's own address – you can see those in Wireshark, tshark, tcpdump.


"Ethernet ping" exists, but only works at Ethernet level, it won't tell you anything about IP. (It's sometimes implemented in the NIC itself, but mostly not implemented at all.)

"Reverse ARP" also exists, but almost never actually implemented either – its primary use was superseded by BOOTP and later DHCP.

  • 2
    IP ping didn’t work but nbtstat -a <computer_name> -c provides the desired IP address! Thanks! – Melebius Nov 26 '15 at 8:50
  • 2
    There is of course also the "extreme" method of sending ARP requests for all 65024 IP addresses and see which ones you get a reply for. – kasperd Nov 26 '15 at 21:57
  • The OP already says “I can … scan IP addresses but [this] takes long … amount of time.” in the question. – Scott Dec 16 '15 at 20:06
  • It doesn't if you have good tools. Zmap can scan the entire IPv4 internet in a matter of hours, for example. Doing an ARP scan across 64k addresses can be very fast. – grawity Dec 16 '15 at 21:38
5

If you configure your machine to get an IP Address from a DHCP server, then obviously, there has to be a DHCP server in the network. Given that you use a direct cable (cross) to connect both computers to eachother, there is no DHCP server, so windows creates a fake random IP address. For this reason, it takes a long time to find each other, because there's no server that manages the connection for you.

The best method would be to add a router with DHCP in the mix, as it will speed up things significantly. But if you don't want to spend any money on this, your second best option is to manaully configure the IP Addresses on both machines to 192.168.0.1 and 192.168.0.2 with a subnetmask of 255.255.255.0

3

If the second machine is completely headless, you'll want to use DCHP of some kind. Either put a router between the two systems whose status screen you can look at, or install a DHCP server application on your working computer to provide the headless system its address.

0

Before troubleshooting be sure to verify that there are static green link lights present on the rear facing view of the network cards. If they don't illuminate green you will need to ensure you have them connected via a cross over cable instead. Also verify the cards duplex settings are the same (full/half duplex) else you may experience an ember colored light.

Once green then you will need to static assign them addresses. I don't recommended you running a dhcp server for assignment if this is on your work network (may break things big time if your dhcp server begins to answer requests from other machines dhcp discovery broadcasts on the network)

-1

How about going to machine #2 and run a ping there! I am assuming you have physical access to the machine and login privileges.

Depending on what the purpose of this endeavor is (and the OS), you could also: - Map to the other computer (assuming you had the computer name) and get the files you need - RDP/SSH via computer name.

  • 1
    The OP says “The other machine has no peripherals attached and I want to access it using RDP …” in the question.  I interpret the first part of this to mean that it has no keyboard or monitor, and, clearly, the OP knows about RDP.  And the computer name isn’t a magic bullet — it works only if the first computer “knows” how to map the name to an IP address.  And the whole point of the question is that “The IP addresses are auto-configured,” so the machines don’t know each other’s addresses. – Scott Dec 16 '15 at 20:09
-1

I'm not an expert, but you can simply look at ipconfig in the cmd window to find the IP address on the second computer which is an automatic IP address if there is no DHCP or just manually configure the IP address to be on the same network and subnet as the first computer.

  • 1
    The OP says “The other machine has no peripherals attached …” in the question.  I interpret this to mean that it has no keyboard or monitor. – Scott Dec 16 '15 at 20:07

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.