arp-scan 1.7 (Default branch)


 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements Software Releases - RSS News arp-scan 1.7 (Default branch)
# 1  
Old 08-02-2008
arp-scan 1.7 (Default branch)

arp-scan sends ARP (Address Resolution Protocol) queries to the specified targets, and displays any responses that are received. It allows any part of the outgoing ARP packets to be changed, allowing the behavior of targets to non-standard ARP packets to be examined. The IP address and hardware address of received packets are displayed, together with the vendor details. These details are obtained from the IEEE OUI and IAB listings, plus a few manual entries. It includes arp-fingerprint, which allows a system to be fingerprinted based on how it responds to non-standard ARP packets.License: GNU General Public License (GPL)Changes:
A new --pcapsavefile (-W) option to save the ARP response packets to a pcap save file for later analysis. A new --vlan (-Q) option to create outgoing ARP packets with an 802.1Q VLAN tag. A new --llc (-L) option to create outgoing ARP packets with RFC 1042 LLC/SNAP framing. New ARP fingerprints. IEEE OUI and IAB files have been updated.Image

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
arp(1M) 						  System Administration Commands						   arp(1M)

NAME
arp - address resolution display and control SYNOPSIS
arp hostname arp -a [-n] arp -d hostname arp -f filename arp -s hostname ether_address [temp] [pub] [trail] DESCRIPTION
The arp program displays and modifies the Internet-to-MAC address translation tables used by the address resolution protocol (see arp(7P)). With no flags, the program displays the current ARP entry for hostname. The host may be specified by name or by number, using Internet dot notation. OPTIONS
-a Display all of the current ARP entries. The definition for the flags in the table are: M Mapping; only used for the multicast entry for 224.0.0.0 P Publish; includes IP address for the machine and the addresses that have explicitly been added by the -s option. ARP will respond to ARP requests for this address. S Static; not learned for the ARP protocol. U Unresolved; waiting for ARP response. You can use the -n option with the -a option to disable the automatic numeric IP address-to-name translation. Use arp -an or arp -na to display numeric IP addresses. -d Delete an entry for the host called hostname. This option may only be used by the super-user. -f Read the file named filename and set multiple entries in the ARP tables. Entries in the file should be of the form: hostname MACaddress [temp] [pub] [trail] See the -s option for argument definitions. -s Create an ARP entry for the host called hostname with the MAC address MACaddress. For example, an Ethernet address is given as six hexadecimal bytes separated by colons. The entry will be permanent unless the word temp is given in the command. If the word pub is given, the entry will be published. For instance, this system will respond to ARP requests for hostname even though the hostname is not its own. The word trail indicates that trailer encapsulations may be sent to this host. arp -s can be used for a limited form of proxy ARP when a host on one of the directly attached networks is not physically present on the subnet. Another machine can then be configured to respond to ARP requests using arp -s. This is useful in certain SLIP configurations. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWcsu | +-----------------------------+-----------------------------+ SEE ALSO
ifconfig(1M), arp(7P), attributes(5) SunOS 5.10 7 Mar 2003 arp(1M)