>Have you tried something like 'arp -a | grep <MAC>'? This yields a >hostname which can be fed into nslookup. if the addy is in the cache, 'arp -an' will list the ip addy and the MAC addy. no nslookup needed.
'tcpdump -e' will list MAC addresses in the dump and you can then see who the owner of that MAC address is. m* -- "The Shining One" -- -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .