Yes there is. This kind of activity is used in ARP Spoofing and ARP Poisoning attacks and is preformed for ex. by arpspoof
. If You want to discover host's MAC, when You know its IP and it is located in Yours broadcast domain (LAN), use arping
. ARP is layer 2 protocol, so it's packets are not forwarded by routers but it's much more reliable then ICMP echo (ping).
Some tools:
arp
- standard program (win/unix)
used to list host's IP-MAC address
association cache, which contains
already learnt IPs
arping
- unix program which sends ARP
Request for a given IP and displays
MAC contained in received ARP Response
arpspoof
- a program from dsniff package generating bogus ARP Responses