Tuesday, April 26, 2011


Network Mapping -> Identify Live Hosts -> arping

I change topic, and with this also try to bring in a new design, but it might change later.

The first tool is the arping. This essentially sends ARP messages to a given host. Obviously will work only on LANs, as ARP is a Layer2 protocol.

Usage: arping [-fqbDUAV] [-c count] [-w timeout] [-I device] [-s source] destination
-f : quit on first reply
-q : be quiet
-b : keep broadcasting, don't go unicast
-D : duplicate address detection mode
-U : Unsolicited ARP mode, update your neighbours
-A : ARP answer mode, update your neighbours
-V : print version and exit
-c count : how many packets to send
-w timeout : how long to wait for a reply
-I device : which ethernet device to use (eth0)
-s source : source ip address
destination : ask for what ip address

More help is available use hping -h to see all parameters

root@bt:~# arping -c 3
ARPING from eth0
Unicast reply from [00:26:37:xx:xx:xx] 111.205ms
Unicast reply from [00:26:37:xx:xx:xx] 141.059ms
Unicast reply from [00:26:37:xx:xx:xx] 158.921ms
Sent 3 probes (1 broadcast(s))
Received 3 response(s)

No comments: