Login or Register to Ask a Question and Join Our Community


Software Releases - RSS News

arp-scan 1.7 (Default branch)

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements Software Releases - RSS News arp-scan 1.7 (Default branch)
# 1  
Old 08-02-2008
arp-scan 1.7 (Default branch)
arp-scan sends ARP (Address Resolution Protocol) queries to the specified targets, and displays any responses that are received. It allows any part of the outgoing ARP packets to be changed, allowing the behavior of targets to non-standard ARP packets to be examined. The IP address and hardware address of received packets are displayed, together with the vendor details. These details are obtained from the IEEE OUI and IAB listings, plus a few manual entries. It includes arp-fingerprint, which allows a system to be fingerprinted based on how it responds to non-standard ARP packets.License: GNU General Public License (GPL)Changes:
A new --pcapsavefile (-W) option to save the ARP response packets to a pcap save file for later analysis. A new --vlan (-Q) option to create outgoing ARP packets with an 802.1Q VLAN tag. A new --llc (-L) option to create outgoing ARP packets with RFC 1042 LLC/SNAP framing. New ARP fingerprints. IEEE OUI and IAB files have been updated.Image

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT HPUX

arp

arp(7P) 																   arp(7P)

NAME

       arp - Address Resolution Protocol

DESCRIPTION

       ARP is a protocol used to dynamically map between DARPA Internet and hardware station addresses.  It is used by all LAN drivers.

       ARP caches Internet-to-hardware station address mappings.  When an interface requests a mapping for an address not in the cache, ARP queues
       the message that requires the mapping, and broadcasts a message on the associated network requesting the address mapping if the	encapsula-
       tion  method has been enabled for the interface.  If a response is provided, the new mapping is cached and any pending message is transmit-
       ted.  ARP queues at most one packet while waiting for a mapping request to be responded to; only the most recently  ``transmitted''  packet
       is kept.

       To  facilitate  communications with systems that do not use ARP, calls are provided to enter and delete entries in the Internet-to-hardware
       station address tables.

   Application Usage:
       Each call takes the same structure as an argument.  sets an ARP entry, gets an ARP entry, and deletes an ARP entry.   These  calls  can	be
       applied to any socket descriptor s, but only by the super-user.	The structure contains:

       The  address  family for the must be for the it must be The only flag bits that can be written are and Fibre Channel hosts only support the
       flag.  causes the entry to be permanent.  specifies that the ARP code should respond to ARP requests for the  indicated	host  coming  from
       other  machines.   This	allows	a host to act as an ARP server, which may be useful in convincing an ARP-only machine to talk to a non-ARP
       machine.

       ARP watches passively for hosts impersonating the local host (i.e., a host that responds to an ARP mapping request  for	the  local  host's
       address).

DIAGNOSTICS

       This message printed on the console screen means that
	    ARP has discovered another host on the local network that responds to mapping requests for its own Internet address.

WARNINGS

       To enable the encapsulation method, use the command (see ifconfig(1M)).

AUTHOR

       ARP was developed by the University of California, Berkeley.

SEE ALSO

       ifconfig(1M), inet(3N), lan(7), arp(1M).

       RFC826, Dave Plummer, Network Information Center, SRI.

																	   arp(7P)