How to find IP address of a machine on network?

[Brian McKee]

On Fri, Jan 16, 2009 at 8:52 PM, NoOp <glgxg at sbcglobal.net> wrote:
> On 01/16/2009 05:00 PM, Derek Broughton wrote:
>> NoOp wrote:
>>> Cool! You uninstalled the repo's version first I presume?
>>
>> Shouldn't be necessary - alien creates a deb package which supercedes the
>> current Ubuntu package, and a later Ubuntu package will superced the alien'd
>> package.
> Yep... 4.76-1 works well after using alien. Interesting that the repo
> nstat version, when given the following command:
>
> $ nmap -T Aggressive -A -v 192.168.2.*
>
> shows (obfuscation apparent):
>
> Host 192.168.2.XXX appears to be up ... good.
> Interesting ports on 192.168.2.XXX:
> Not shown: 1712 closed ports
> PORT     STATE SERVICE     VERSION
> 139/tcp  open  netbios-ssn Samba smbd 3.X (workgroup: MSHOME)
> 445/tcp  open  netbios-ssn Samba smbd 3.X (workgroup: MSHOME)
> 5900/tcp open  vnc         VNC (protocol 3.7)
>
> The 4.76-1 version shows:
>
> Host <hostname> (192.168.2.XXX) appears to be up ... good.
> Interesting ports on <hostname> (192.168.2.XXX):
> Not shown: 996 closed ports
> PORT      STATE SERVICE     VERSION
> 139/tcp   open  netbios-ssn Samba smbd 3.X (workgroup: MSHOME)
> 445/tcp   open  netbios-ssn Samba smbd 3.X (workgroup: MSHOME)
> 5900/tcp  open  vnc         VNC (protocol 3.7)
> 16001/tcp open  tcpwrapped
>
> Host script results:
> |_ NBSTAT: NetBIOS name: <hostname>, NetBIOS MAC: X:X:X:X:X:X
> |  Discover OS Version over NetBIOS and SMB: Unix
> |_ Discover system time over SMB: 2009-01-16 17:02:58 UTC-8
>
> So the newer version adds some nice details.

The guy that wrote nmap did a presentation at BlackHat ? where he
talks about the new features.  Apparently he basically portscanned
really large swathes of the internet to help statistically prove what
ports and services the default scans should look for.  If you think
about that for a minute you can imagine what problems he had with his
ISP etc :-)  An interesting video - which I *think* is on the site
somewhere.  If you can't find it and are interesting drop me a line
off list and I'll find it for you.

As far as the dns-sd command - that's Bonjour/Apple specific.  As I
pointed out earlier, use the avahi-* commands on Ubuntu.

And since those commands look at the local cache rather than poke
around on the network - they are certainly more efficient - although
the discussion as to which tool is 'better' is kinda silly.  They both
accomplish the result in different ways under different circumstances.

Brian