Nmap can discover the MAC address of a remote target only if. The target is on the same link as the machine nmap runs on, or; the target leaks this information through SNMP, NetBIOS etc. Another possibility comes with IPv6 if the target uses EUI-64 identifiers, then the MAC address can be deduced from the IP address. Basic Nmap Scan against IP or host. Now, if you want to scan a hostname, simply. I notice that nmap -sn is no longer provide the MAC address for remote host as discussed in Can I use nmap to discover IPs and mac addresses? I would like to get something like netdiscover output. Just IP & MAC Address only. Nmap version 7.80. Wolf@linux:$ nmap -V Nmap version 7.80 ( ) Platform: x8664-pc-linux-gnu e.g. MAC addresses are usually written in the form of 12 hexadecimal digits. For example, this is a valid MAC address: D8-D3-85-EA-1B-EE. Each hexadecimal character is 4 bits long, so the first six hexadecimal characters represent the vendor (in this case Hewlett Packard ). Nmap may not gather MAC addresses using alternative mechanisms at the moment, but there is no reason that it can't. It already interacts with higher protocols, like RPC and NetBIOS name service, from which it already gathers the hostname. The mac address is available via the same interface.
Ethernet uses MAC (Media Access Control) addresses to uniquely identify a host in an Ethernet environment. Every Ethernet network interface card (NIC) has a MAC address burned in its firmware, which is why MAC addresses are sometimes known as hardware addresses.
MAC addresses are 6 Bytes (48 bits) long. Every network card manufacturer gets a universally unique 3-byte code called the Organizationally Unique Identifier (OUI). Manufacturers agree to give all NICs a MAC address that begins with the assigned OUI. The manufacturer then assigns a unique value for the last 3 bytes, which ensures that every MAC address is globaly unique.
In the following picture we can see the structure of a MAC address:
MAC addresses are usually written in the form of 12 hexadecimal digits. For example, this is a valid MAC address: D8-D3-85-EA-1B-EE. Each hexadecimal character is 4 bits long, so the first six hexadecimal characters represent the vendor (in this case Hewlett Packard).
How to find the MAC address of your computer
You can find out the MAC address your computer is using. The process depends on your operating system:
Windows
Go to the Command Prompt (Start – Programs – Accessories – Command Prompt on Windows XP, for newer versions of Windows, just type cmd from the Start screen). Once inside the Command Prompt, type the ipconfig/all command. The MAC address is shown in the Physical Address field:
Linux
Nmap Ip List
Go to the shell and type the ifconfig command. The MAC address should be listed as HWaddr:
How To Find Mac Address
OSI modelTCP/IP suite of protocols