1

The mac address would be that of the router, I presume. But could I distinguish the ip addresses of the computers behind the router, or could I only see a global ip address that belongs to the router?

  • 1
    The mac is thatthat of YOUR router - MAC addresses are not part of IP and do not get forwarded outside the physical segment, which normally ends at the next switch / ethernet port. SO, you do not even have a MAC address. – TomTom May 11 '12 at 10:40

1 Answers1

4

Using Scapy you can graph IP ID fields patterns to know how many distinct IP stacks are behind a NAT, but you may generally not be able to discover the IP behind the NATdevice. Here's a link to the page referencing it.

Maxwell
  • 5,076
  • 1
  • 26
  • 31
  • And what about dynamic ip addresses? Would scapy not be confused by that if they were completely random? –  May 11 '12 at 08:58
  • I've updated my answer to make it more clear. – Maxwell May 11 '12 at 09:08
  • 1
    If the devices behind the router use a proxy, Scapy etc. will fail. If neither NAT nor a proxy is used, Scapy will not be needed, as you can identify the hosts by their IP. – Sven May 11 '12 at 09:15