Nmap can discover the MAC address of a remote target only if. The target is on the same link as the machine nmap runs on, or; the target leaks this information through SNMP, NetBIOS etc. Another possibility comes with IPv6 if the target uses EUI-64 identifiers, then the MAC address can be deduced from the IP address. Basic Nmap Scan against IP or host. Now, if you want to scan a hostname, simply. I notice that nmap -sn is no longer provide the MAC address for remote host as discussed in Can I use nmap to discover IPs and mac addresses? I would like to get something like netdiscover output. Just IP & MAC Address only. Nmap version 7.80. Wolf@linux:$ nmap -V Nmap version 7.80 ( ) Platform: x8664-pc-linux-gnu e.g. MAC addresses are usually written in the form of 12 hexadecimal digits. For example, this is a valid MAC address: D8-D3-85-EA-1B-EE. Each hexadecimal character is 4 bits long, so the first six hexadecimal characters represent the vendor (in this case Hewlett Packard ). Nmap may not gather MAC addresses using alternative mechanisms at the moment, but there is no reason that it can't. It already interacts with higher protocols, like RPC and NetBIOS name service, from which it already gathers the hostname. The mac address is available via the same interface.
Nmap Ip List
How To Find Mac Address