How to decipher Cisco’s user name output in DHCP bindings
If you are using a Cisco router as your DHCP server, you have undoubtedly had occasion to try to figure out which of your clients owned the IP address that was associated with some given MAC address. Here is a cool little side trick which might even be fun enough to use when nothing is broken in your network!
I have constructed a very simple network in GNS3 just so I could configure a router as a DHCP server and issue an address to a client. It is shown in figure 1:
Figure 1
ESW1 is handing out addresses and ESW2 is a client. I changed the mac-address on int f0/0 on ESW2 so I would recognize it immediately. The configured mac-address is dead.beef.cafe.
Figure 2
As you can see, ESW2 has already received an IP address, and it is 172.30.0.52. Now let’s look at the output on ESW1 of the show ip dhcp binding command:
Figure 3
It is clear that we are seeing output in hex. Here is where it gets fun. Copy that hex string and then find yourself a hex-to-ascii converter. I used one that I found here Hex to ASCII text converter. Notice the wealth of information that is discovered after the conversion:
Figure 4
Wow! I see the mac-address of the client – dead.beef.cafe. I can even see the interface involved. You may find this useful when you are trying to track down maleficent mac-addresses in your network.
If you have any comments or questions, please feel free to post them….
Until next time.
Mark Jacob
Cisco and CompTIA Network + Instructor – Interface Technical Training
Phoenix, AZ
Creating Users and Managing Passwords in Microsoft Office 365
In this Office 365 training video, instructor Spike Xavier demonstrates how to create users and manage passwords in Office 365. For instructor-led Office 365 training classes, see our course schedulle: Spike Xavier SharePoint Instructor – Interface Technical Training Phoenix, AZ 20347: Enabling and Managing Office 365
JavaScript for C# Developers – September 24, 2014
Is JavaScript worth taking the time to learn if I’m a server-side .NET developer? How much of C# carries over to JavaScript? In this recorded video from Dan Wahlin’s webinar on September 24,2014, Dan answers these questions and more while also discussing similarities between the languages, key differences, and the future of JavaScript (ES6). If … Continue reading JavaScript for C# Developers – September 24, 2014
Detailed Forensic Investigation of Malware Infections – April 21, 2015
How does an investigator hunt down and identify unknown malware? In this recording of our IT Security training webinar on April 21, 2015, Security expert Mike Danseglio (CISSP / CEH) performed several malware investigations on infected computers and identify symptoms, find root cause, and follow the leads to determine what’s happening. He demonstrated his preferred … Continue reading Detailed Forensic Investigation of Malware Infections – April 21, 2015
Write a Comment
