arp-scan sends ARP (Address Resolution Protocol) queries to the specified targets, and displays any responses that are received. It allows any part of the outgoing ARP packets to be changed, allowing the behavior of targets to non-standard ARP packets to be examined. The IP address and hardware address of received packets are displayed, together with the vendor details. These details are obtained from the IEEE OUI and IAB listings, plus a few manual entries. It includes arp-fingerprint, which allows a system to be fingerprinted based on how it responds to non-standard ARP packets.
License: GNU General Public License (GPL)
Changes:
A new --pcapsavefile (-W) option to save the ARP response packets to a pcap save file for later analysis. A new --vlan (-Q) option to create outgoing ARP packets with an 802.1Q VLAN tag. A new --llc (-L) option to create outgoing ARP packets with RFC 1042 LLC/SNAP framing. New ARP fingerprints. IEEE OUI and IAB files have been updated.
More...