![]() We are talking about the same Ethernet device. The windows IPv6LinkLocalAddress value for that device is fe80::6d8d:28d8:191b:3f30%3 in this example the WDS server show a log entry such as : The WDS Bitlocker network unlock logs show the IPv6 Link local address of the physical device when the client PC is booting, and it the PC’s UEFI bios that send’s out the Network unlock request. I agree simple is better but in this case it does not work, The WDS logs are obtained in this manner $WDSEventsVerbose = Get-WinEvent -cn $WDS -EA silentlycontinue -FilterHashtable = (Get-Netadapter -CimSession $Script:RemoteCimSession | Where-Object įor remote systems just use PSRemoting as normal. I am parsing WDS network unlock logs and want to identify source computer. I got starting by getting the Mac I am interested in. Note the that IPV6 address obtained by the ipconfig / Get-NetIPAddress are not suitable for my needs, these address obfuscate the Mac address. prepend the link-local prefix: fe80::5074:f2ff:feb1:a87f.replace first octet with newly calculated one: 5074:f2ff:feb1:a87f.convert octet back to hexadecimal: 01010000 -> 50.convert the first octet from hexadecimal to binary: 52 -> 01010010. ![]() reformat to IPv6 notation 5274:f2ff:feb1:a87f.take the mac address: for example 52:74:f2:b1:a8:7f.basically doing this ( ref ) in powershell. ![]() To do this and to make it easer we should convert the 64 bit MAC into binary, use the chart above to help with your conversion.Trying to convert a Mac address to an Ipv6 link-local address. So now the remaining part is to check the local link flag which is bit seven of the sixty four bit MAC. So you have not converted it from 48 Bits to 64 Bits as the address now becomes Now between them we insert FF:FE, you might ask one why FF:FE? well that’s outside the scope of this article but have a look here: So we split the address into two chunks down the middle so it becomes So today I will work with my windows IP: 00-1C-C0-E2-84-E4…įor sake of readability and standards, we will from here on write that MAC as 00:1C:C0:E2:84:E4 To do this we must insert 0xFFFE or simply known as FF:FE. So now that you have this the first thing we should do is convert it to EUI-64 bit so that we may use it to get our IP.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |