Re: two problems and a question with nmap or nmapwin

[Philippe Biondi <biondi () cartel-securite fr>]

On Mon, 5 May 2003, Robert Thompson wrote:

> Question:
>  My reason for getting nmap is because I want to find every IP address
> that is connected to my network.  Most of them I know are out there, but
> I do not know if there are any "rogue" hardware out there that is either
> hooked up by someone else or is a piece of gear that should be there
> that I have overlooked.
>  I want an nmap command that will give me back a list of all of the IP
> addresses on this side of my firewall so that I can know that I have all
> of them in my network diagram.
>  What is the nmap command I want to use to get this kind of information
> back?
>  Any help with any of these problems greatly appreciated.

nmap -sP 172.16.1.0/24

You may also consider the faster approach of ARP ping (if all the
machines are on the same ethernet broadcast domain).
The arping program does not do sweep pings AFAIK but scapy does :
(http://www.cartel-securite.fr/pbiondi/python/scapy.html)
# ./scapy.py
Welcome to Scapy (0.9.12.3beta)
> > > arping("172.16.1.0/24")

> From my own test, counting seconds in my head, it's about 80% faster on a
10% full C class.







-- 
Philippe Biondi <biondi@ cartel-securite.fr> Cartel Sécurité
Security Consultant/R&D                      http://www.cartel-securite.fr
Phone: +33 1 44 06 97 94                     Fax: +33 1 44 06 97 99
PGP KeyID:3D9A43E2  FingerPrint:C40A772533730E39330DC0985EE8FF5F3D9A43E2



---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).