Old D-Link Router whats its IP?!

[manicmonkey]

sure, if they are connected to one-another. and your router is setup to respond to pings!
take f**king hours to go through the entire ip space tho!

 

[TheCake]

I'm running an snmp scan to discover it

 

[manicmonkey]

good plan

theres a much greater chance of that being enabled. It may depend on your firmware tho...

http://66.102.9.104/search?q=cache:...ink+504+disable+snmp&hl=en&gl=uk&ct=clnk&cd=3

 

[TheCake]

I'm going to take a gamble as i've discovered stuff before with SNMP. FIngers crossed. It started at 0.0.0.0 and its up to 0.3.21.80 so its battling through it. Its got about 3 hours before I need it!

We have a great tool from sonicwall whereby you run it and it locates all the sonciwall devices on the network almost instantly. No such tool for d-link by the looks of it.

I did notice the machine still has its MAC address on the back - is there anyway we can use this? I've never changed it. Is the mac address unique?

 

[manicmonkey]

yep, mac is totally unique for every nic in the world

let me do some research on usage...

 

[TheCake]

Yeah cool. I've never changed it so I would presume its still valid. If we could find a LAN MAC scanner which would bring up device details we would be onto a winner.

 

[sn00p]

use ethereal, it's more than likely it'll spew some packets out onto the network and then you at least have a starting point.

 

[manicmonkey]

http://en.wikipedia.org/wiki/Reverse_Address_Resolution_Protocol

read a bit of that if you want. probably not useful in this case, but might interest you to know

 

[TheCake]

Come again SNoop?

 

[manicmonkey]

yeah a network snooper if probably a good idea to, the router is bound to send out some random discovery packets, which would contain the source address

 

[manicmonkey]

try http://66.102.9.104/search?q=cache:...ac+address+discovery&hl=en&gl=uk&ct=clnk&cd=3

i need to back to work now...

good luck

 

[sn00p]

Come again SNoop?

Ethereal will set your network card in promiscous mode and will capture all packets on the network. It's possible that it will spew out some packets onto the network, then again it might not.

Any traffic it generates you'll be able to see. I use ethereal all the time at the moment because I've been doing embedded ethernet stuff, good tool.

 

[TheCake]

thanks mate will see where i get to

 

[Daz]

If it's mission critical, I'd have bought a replacement about 2 hours ago

Seriously.. Heh.

 

[TheCake]

cheers snoop! I set it capturing and there was lost of ARP request from my laptop and then... ka pow! an SSDP notify request from the router with resolved IP.

Ba Da Bing!

 

[TheCake]

If it's mission critical, I'd have bought a replacement about 2 hours ago

Seriously.. Heh.

You're going to get your ass tickled if you carry on

 

[sn00p]

cheers snoop! I set it capturing and there was lost of ARP request from my laptop and then... ka pow! an SSDP notify request from the router with resolved IP.

Ba Da Bing!

No problem.

The ARP requests will have been from your ip scanner program as it tried to resolve an ip to a ethernet address.

 

[TheCake]

Hmmm unsure now...

It says the IP is: 213.210.36.186 and the destination is 239.255.255.0 thoughts?

 

[sn00p]

I know now why it was not ebing used, for some reason at some point its been put on a funny subnet, 239.255.255.250 (probably a typo) and now it doesn't work.

I can't put my machine on the same subnet either!

How on earth has it allowed somebody to do that? :S

Edit: Fricking smiley code on this board!!! grr.

 

[TheCake]

I have no idea.... what a mess. I presume the destination is the subnet? maybe?

Thoughts?

 

[sn00p]

I have no idea.... what a mess. I presume the destination is the subnet? maybe?

Thoughts?

What are you looking at? Is this a packet in ethereal?

Destination is the IP where it's trying to connect to.

You won't see subnet information because it isn't transported, it's only used for working out if a packet needs to go through a gateway.

Should be trivial to work out the subnet as there's only 32 permutations.

 

[TheCake]

Ok i'll get cracking. The routers IP is definately 213.210.36.186 so I should have the subnet in a few mins

 

[TheCake]

Snoop,

I've got a ping running in the background on the routers IP. I'm running through all the possible subnets starting from 255.0.0.0 until I get "reply from...." Is this the best solution?

 

[sn00p]

want to start from 128.0.0.0 as that's the first legal subnet address, not 255.0.0.0.

Ping sounds like a good idea as long as it's configured to respond the icmp echo packets!

 

[TheCake]

I've only gone and bloody done it

Frame 67
Soure D-LInk_99:fb:7b
Broadcast
ARP
Info... the good bit...

"Who has 213.210.36.185? Tell 213.210.36.186"

So I changed my IP to 213.210.36.185 and Ta-Da! What a result that is!

 

[sn00p]

I've only gone and bloody done it

Nice one

 

[TheCake]

Cheers mate couldn't have done it without ya. Drinks on me

 

[Daz]

I'm glad it's fixed for you,

Now go buy a new router.

:rasp: