1, need to install before installation
Yum install-y libpcap libpcap-devel
If the Yum tool is not installed
You need to use RPM to install the following packages
[Email protected] arp-scan-1.8]#
Yum List|grep libpcap
Libpcap.i386 14:0.9.4-15.el5 Installed
libpcap.x86_64 14:0.9.4-15.el5 Installed
Libpcap-devel.i386 14:0.9.4-15.el5 Installed
libpcap-devel.x86_64 14:0.9.4-15.el5 installed2, download package
wget http://www.nta-monitor.com/tools/arp-scan/download/arp-scan-1.8.tar.gz
3, compiling the package
Tar xvf arp-scan-1.8.tar.gz
CD arp-scan-1.8
./configure
Make && make install view all hosts in the network segment
[Email protected] arp-scan-1.8]#
arp-scan-l
Interface:eth0, Datalink type:en10mb (Ethernet)
Starting Arp-scan 1.8 with the (http://www.nta-monitor.com/tools/arp-scan/)
192.168.100.1 00:24:1d:17:d6:e3 giga-byte Technology Co.,ltd.
192.168.100.4 00:26:b9:51:68:ef Dell INC//NIC
192.168.100.5 20:CF:30:6F:6F:C6 ASUSTek Computer Inc.
192.168.100.6 48:5b:39:86:1c:62 ASUSTek Computer Inc.
192.168.100.7 48:5B:39:86:1C:3A ASUSTek Computer Inc.
There are multiple network cards to specify which NIC to select
[Email protected] ~]#
Arp-scan--interface=eth1-l
Interface:eth1, Datalink type:en10mb (Ethernet)
Starting Arp-scan 1.8 with the (http://www.nta-monitor.com/tools/arp-scan/)
192.168.100.1 00:24:1d:17:d6:e3 giga-byte Technology Co.,ltd.
192.168.100.4 00:26:b9:51:68:ef Dell INC
192.168.100.5 20:CF:30:6F:6F:C6 ASUSTek Computer Inc.
192.168.100.6 48:5b:39:86:1c:62 ASUSTek Computer Inc.
192.168.100.7 48:5B:39:86:1C:3A ASUSTek Computer Inc.
192.168.100.8 bc:30:5b:ad:74:22 Dell Inc.
192.168.100.9 00:26:b9:8e:16:17 Dell INC
192.168.100.15 00:26:b9:35:cf:63 Dell INC
192.168.100.17 00:0c:29:08:6a:06 VMware, Inc.
192.168.100.18 00:0c:29:08:6a:06 VMware, Inc.
192.168.100.19 00:0c:29:08:6a:06 VMware, Inc.
192.168.100.20 00:0c:29:08:6a:06 VMware, Inc.
192.168.100.22 00:24:1d:17:d6:e3 giga-byte Technology Co.,ltd.
192.168.100.23 84:2b:2b:59:31:4f Dell Inc.
192.168.100.24 00:26:b9:8e:16:17 Dell INC
Specify a section of IP address
[Email protected] ~]#
Arp-scan--interface=eth1 192.168.100.0/29
Interface:eth1, Datalink type:en10mb (Ethernet)
Starting Arp-scan 1.8 with 8 hosts (http://www.nta-monitor.com/tools/arp-scan/)
192.168.100.1 00:24:1d:17:d6:e3 giga-byte Technology Co.,ltd.
192.168.100.4 00:26:b9:51:68:ef Dell INC
192.168.100.5 20:CF:30:6F:6F:C6 ASUSTek Computer Inc.
192.168.100.6 48:5b:39:86:1c:62 ASUSTek Computer Inc.
192.168.100.7 48:5B:39:86:1C:3A ASUSTek Computer Inc.
Used to update the MAC address so that it is easy to know when scanning the NIC of the vendor
[[Email protected] ~]# g
et-oui-v
Fetching OUI data from Http://standards.ieee.org/regauth/oui/oui.txt
Fetched 2642079 bytes
Opening Output File Ieee-oui.txt
16445 OUI entries written to file Ieee-oui.txt
[Email protected] ~]# get-iab-v
Fetching IAB data from Http://standards.ieee.org/regauth/oui/iab.txt
Fetched 608631 bytes
Opening Output File Ieee-iab.txt
3995 IAB entries written to file Ieee-iab.txt
Other usages can be referred to Arp-scan--help
Scan LAN IP address with Arp-scan
