Monday, October 15, 2012

Mikrotik network discovery protocol and tool to get the packet

If you don't know the IP address and firmware of mikrotik box, you can use winbox to find out about them. If the Mikrotik discovery protocol is enabled.

but if you use linux, the winbox (wine) can not get the mikrotik discovery protocol packet , you have to find other tool to get the packet.

I come with two options:

-  cdpr

dara@tun-K42JB:/home/tun# cdpr -d vboxnet0
cdpr - Cisco Discovery Protocol Reporter
Version 2.4
Copyright (c) 2002-2010 - MonkeyMental.com

Using Device: vboxnet0
Waiting for CDP advertisement:
(default config is to transmit CDP packets every 60 seconds)
Device ID
  value:  MikroTik
Addresses
  value:  192.168.1.5


-  tcpdump
 dara@tun-K42JB:/home/tun# tcpdump -v -i vboxnet0
 19:02:52.858882 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 84)
    192.168.1.5.5678 > 255.255.255.255.5678: UDP, length 56
19:02:52.858898 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 84)
    192.168.1.5.5678 > 255.255.255.255.5678: UDP, length 56
19:02:52.859209 CDPv1, ttl: 120s, checksum: 376 (unverified), length 63
    Device-ID (0x01), length: 8 bytes: 'MikroTik'
    Address (0x02), length: 13 bytes: IPv4 (1) 192.168.1.5
    Capability (0x04), length: 4 bytes: (0x00000001): Router
    Version String (0x05), length: 6 bytes:
      2.9.27
    Platform (0x06), length: 8 bytes: 'MikroTik'
19:02:52.859220 CDPv1, ttl: 120s, checksum: 376 (unverified), length 63
    Device-ID (0x01), length: 8 bytes: 'MikroTik'
    Address (0x02), length: 13 bytes: IPv4 (1) 192.168.1.5
    Capability (0x04), length: 4 bytes: (0x00000001): Router
    Version String (0x05), length: 6 bytes:
      2.9.27
    Platform (0x06), length: 8 bytes: 'MikroTik'





you also can use wireshake also

1 comment: