Exploit-DB updates

Sunday, March 13, 2011

Quick way to find IP/Mac's on your network.

Normally I use fping to find out if there's other people on the network but came across a slightly quicker way - "arp-scan". You can get it through your distro's repositories. A quick example usage below;

arp-scan -l -v -I wlan0

The "-l" displays the ip and mac's on the network and the "-v" is just for verbosity, because we all love that.

Interface: eth0, datalink type: EN10MB (Ethernet)
DEBUG: pcap filter string: "arp and ether dst 00:17:31:da:98:14"
DEBUG: Loaded 10353 IEEE OUI/Vendor entries from /usr/share/arp-scan/ieee-oui.txt.
DEBUG: Loaded 1892 IEEE IAB/Vendor entries from /usr/share/arp-scan/ieee-iab.txt.
DEBUG: Loaded 5 MAC/Vendor entries from /usr/share/arp-scan/mac-vendor.txt.
DEBUG: Using 10.0.0.0:255.255.255.0 for localnet
DEBUG: pkt len=64 bytes, bandwidth=256000 bps, interval=2000 us
Starting arp-scan 1.6 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/)
10.0.0.1    60:20:11:a3:e4:76    (Unknown)    Padding=0000000000000000000000000000e8f6
10.0.0.5                    00:f4:19:84:0d:4d    (Unknown)    Padding=0000000000000000000000000000c9e0
---    Pass 1 complete
---    Pass 2 complete

2 packets received by filter, 0 packets dropped by kernel
Ending arp-scan 1.6: 256 hosts scanned in 1.419 seconds (180.41 hosts/sec).  2 responded