1

A computer I only have remote access to is shutdown, but it has been powered on in the last 2 hours..

I have access to another PC on the same LAN, will the target computer's MAC address persist somewhere so I can read it from so that I can send it a WOL packet?

If so, where will it be? And how can I read it?

Richard
  • 105
  • 1
  • 2
  • 16

1 Answers1

4

It would be stored in ARP tables on devices in the same network as it (any device, computers, routers, etc.), or in the MAC address table of the switch it's directly connected to.

ARP caches on PCs tend to expire very quickly (less than a minute in Windows Vista/7), so you're not going to find anything there; the same is true for MAC address tables on switches (default timeout is 5 minutes for Cisco), and you would anyway need a managed switch (and access to it) in order to inspect its MAC table.

The only place you'll likely find a MAC address after 2 hours is in the logs or configuration for your DHCP server -- and that's assuming that the host is configured using DHCP. Otherwise, I'm sorry, but I don't think you will be able to find anything after 2 hours.

womble
  • 96,255
  • 29
  • 175
  • 230
Massimo
  • 70,200
  • 57
  • 200
  • 323