Nmap无法检索MAC地址和供应商 [英] Nmap not retrieving MAC address and Vendor

问题描述

我在Nmap中发现了一个奇怪的行为（如果重要的话，我使用的是5.51版本，但在5.00版本中存在相同的问题），在某些网络上，该插件无法获取MAC地址，因此无法获取供应商。奇怪的是，它检索几乎所有内容，例如操作系统等，但不打印MAC地址。那怎么可能？这是我通常使用的命令：

I've found a strange behaviour in Nmap (I am using version 5.51 if that matters but I have the same issue with version 5.00), on some networks this plugin does not retrieve MAC address and, consequently, Vendor. The strange thing is that it retrieves almost everything like operating system and so on but it does not print the MAC address. How is that possible? This is the command I use usually:

nmap -A -O 192.168.1.0/24 -oX mynetwork.xml

推荐答案

Nmap仅在扫描主机上的MAC地址时才能检索MAC地址。本地子网，可通过第2层（以太网或wifi）直接访问。当您跨路由器（默认网关）扫描主机时，扫描主机将在发送/接收第3层数据包时与第2层的路由器通信，因此，Nmap将只能看到路由器的MAC地址，而不能看到目的地主机MAC地址。

Nmap can only retrieve the MAC address if you are scanning hosts on the local subnet, directly reachable via layer 2 (ethernet or wifi). When you scan hosts across a router (default gateway), your scanning host will talk to the router on layer 2 when sending/receiving layer 3 packets, and thus, Nmap would only be able to see the router's MAC address, but not the destination host MAC address.

（尽管在某些情况下可以通过诸如 NetBIOS ，SNMP等，并且为此目的有NSE脚本，Nmap通常不会这样做。）

(While it is technically possible under some circumstances to determine the MAC address of a non-local host through protocols such NetBIOS, SNMP etc., and there are NSE scripts for that purpose, Nmap does not generally do that.)

这篇关于Nmap无法检索MAC地址和供应商的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！