arp-scan 1.7 (Default branch)


 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements Software Releases - RSS News arp-scan 1.7 (Default branch)
# 1  
Old 08-02-2008
arp-scan 1.7 (Default branch)

arp-scan sends ARP (Address Resolution Protocol) queries to the specified targets, and displays any responses that are received. It allows any part of the outgoing ARP packets to be changed, allowing the behavior of targets to non-standard ARP packets to be examined. The IP address and hardware address of received packets are displayed, together with the vendor details. These details are obtained from the IEEE OUI and IAB listings, plus a few manual entries. It includes arp-fingerprint, which allows a system to be fingerprinted based on how it responds to non-standard ARP packets.License: GNU General Public License (GPL)Changes:
A new --pcapsavefile (-W) option to save the ARP response packets to a pcap save file for later analysis. A new --vlan (-Q) option to create outgoing ARP packets with an 802.1Q VLAN tag. A new --llc (-L) option to create outgoing ARP packets with RFC 1042 LLC/SNAP framing. New ARP fingerprints. IEEE OUI and IAB files have been updated.Image

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
ARP(3)							     Library Functions Manual							    ARP(3)

NAME
arp - Internet Address Resolution Protocol SYNOPSIS
bind -a #a /net/arp /net/arp/ctl /net/arp/data /net/arp/stats DESCRIPTION
The arp device provides the means by which the kernel resolves IP addresses into Ethernet addresses. A cache is maintained by the arp device to speed the process. The ctl file controls the ARP cache maintained by the kernel. The flush control message invalidates all entries in the cache. The delete ipaddr control message invalidates a single cache entry. All IP addresses passed to the system are in the canonical textual form described in ip(2). The perm ipaddr control message makes an existing cache entry permanent. When the kernel boots, ipconfig sets up the IP stream and arpd opens #a/arp/data (see ipconfig(8)). This establishes the ARP cache and enables arpd to receive all ARP packets from the network, which it uses to maintain the cache by writing the results of address resolution requests back into the cache. The IP stream module uses the cache to translate IP addresses. Subsequent opens of the data file allow the contents of the cache to be examined. Each cache entry consists of an IP address, an Ethernet address, and the status of the entry. Entries may be invalid, permanent, or temporary. Permanent entries will never be aged from the cache. Temporary entries may be replaced by new addresses entered by the ARP server. The file stats reports the cache performance. SEE ALSO
ip(3), ipconfig(8) SOURCE
/sys/src/9/port/devarp.c ARP(3)