Netdiscover – Active/Passive network address scanner using ARP requests

Sponsored Link
Netdiscover is a network address discovering tool that was developed mainly for those wireless networks without DHCP servers, though it also works on wired networks. It sends ARP requests and sniffs for replies.

Install Netdiscover On ubuntu 16.10/16.04

Open the terminal and run the following command

sudo apt-get install netdiscover

Netdiscover Syntax

netdiscover [-i device] [-r range | -p] [-s time] [-n node] [-c count] [-f] [-S]

-i device -- The network interface to sniff and inject packets. If no interface is specified, first available will be used.

-r range -- Scan a given range instead of auto scan. Valid range values area for example: 192.168.0.0/24, 192.168.0.0/16 or 192.168.0.0/8.

-p -- Enable passive mode. In passive mode, netdiscover does not send anything, but does only sniff.

-s time -- Sleep given time in milliseconds between each arp request injection. (default 1)

-c count -- Number of times to send each arp request. Useful for networks with packet loss, so it will scan given times for each host.

-n node -- Last ip octet of the source ip used for scanning. You can change it if the default host is already used. (allowed range: 2 to 253, default 66)

-S -- Enable sleep time suppression between each request. If set, netdiscover will sleep after having scanned 255 hosts instead of sleeping after each one.

This mode was used in netdiscover 0.3 beta4 and before. Avoid this option in networks with packet loss, or in wireless networks with low signal level. (also called hardcore mode)

-f -- Enable fast mode scan. This will only scan for .1, .100 and .254 on each network. This mode is usefull while searching for ranges being used. After you found such range you can make a specific range scan to find online boxes.

sudo netdiscover

Sponsored Link

Related posts

One thought on “Netdiscover – Active/Passive network address scanner using ARP requests

  1. Wondering what I would use this for instead of just using my old friend arp-scan, I suppose possibly the passive sniffing?

Leave a comment

Your email address will not be published. Required fields are marked *