SEARCH
NEW RPMS
DIRECTORIES
ABOUT
FAQ
VARIOUS
BLOG
DONATE


YUM REPOSITORY

 
 

MAN page from openSUSE Tumbleweed netdiscover-0.3_beta7-2.6.x86_64.rpm

netdiscover

Section: User Commands (8)
Updated: November 2009
Index 

NAME

netdiscover - an active/passive arp reconnaissance tool. 

SYNOPSIS

netdiscover [-i device] [-r range | -l file | -p] [-s time] [-nnode] [-c count] [-f] [-d] [-S] [-P] [-L] 

DESCRIPTION

netdiscover is an active/passive arp reconnaissance tool, initiallydeveloped to gain information about wireless networks without dhcpservers in wardriving scenarios. It can also be used on switchednetworks. Built on top of libnet and libpcap, it can passively detectonline hosts or search for them by sending arp requests.

Furthermore, it can be used to inspect your network's arp traffic, orfind network addresses using auto scan mode, which will scan forcommon local networks. 

OPTIONS

-i device
The network interface to sniff and inject packets. If no interface isspecified, first available will be used.

-r range
Scan a given range instead of auto scan. Valid range values area forexample: 192.168.0.0/24, 192.168.0.0/16 or 192.168.0.0/8.

-l file Scan ranges contained on the given file, it must
contain one range per line.

-p
Enable passive mode. In passive mode, netdiscover does not sendanything, but does only sniff.

-s time
Sleep given time in milliseconds between each arp requestinjection. (default 1)

-c count
Number of times to send each arp request. Useful for networks withpacket loss, so it will scan given times for each host.

-n node
Last ip octet of the source ip used for scanning. You can change it ifthe default host is already used. (allowed range: 2 to 253, default66)

-S
Enable sleep time suppression between each request. If set,netdiscover will sleep after having scanned 255 hosts instead ofsleeping after each one. This mode was used in netdiscover 0.3 beta4and before. Avoid this option in networks with packet loss, or inwireless networks with low signal level. (also called hardcore mode)

-f
Enable fast mode scan. This will only scan for .1, .100 and .254 oneach network. This mode is useful while searching for ranges beingused. After you found such range you can make a specific range scan tofind online boxes.

-d
Ignore configuration files at home dir, this will use defaults rangesand ips for autoscan and fast mode. See below for information aboutconfiguration files.

-P
Produces output suitable to be redirected into a file or be parsed byanother program, instead of using interactive mode. Enabling thisoption, netdiscover will stop after scanning given ranges.

-L
When using -P, continue program execution after the active scan phaseto capture ARP packets passively.

 

USAGE

If passive mode (-p), scan list (-l) or scan range (-r) options aren'tenabled, netdiscover will scan for common lan addresses.

Screen control keys

h
Show help screen

j
Scroll down (or down arrow)

k
Scroll up (or up arrow)

a
Show arp replies list

r
Show arp requests list

q
Close help screen or end application

 

CONFIG FILES

There are 2 configuration files that netdiscover will look for, eachtime it is executed, if file doesn't exist it will use default values.You can use the -d switch to disable reading and loading configurationfiles.

~/.netdiscover/ranges
This file contains a list of ranges (one per line) used for auto scanmode instead of default ranges. By default netdiscover will use a listof common ranges used on local networks.

Example:
 192.168.21.0/24
 172.26.0.0/16
 10.0.0.0/8

~/.netdiscover/fastips
List containing the last octect of the ips to be scanned on eachsubnet, when using fast mode, by default (1,100,154).

Example:
 1
 10
 25
 254

 

AUTHOR

netdiscover was written by Jaime Penalba Estebanez.

This manual page was originally written by Nicolas Weyland, for theDebian project. This man page has been merged into netdiscoverproject, and modified from the original.


 

Index

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
USAGE
CONFIG FILES
AUTHOR

This document was created byman2html,using the manual pages.