NAME

       netdiscover - an active/passive arp reconnaissance tool.

SYNOPSIS

       netdiscover [-i device] [-r range | -l file | -p] [-s time] [-n node] [-c count] [-f] [-d] [-S] [-P] [-L]

DESCRIPTION

       netdiscover  is  an  active/passive arp reconnaissance tool, initialy developed to gain information about
       wireless networks without dhcp servers in wardriving scenarios. It can also be used on switched networks.
       Built on top of libnet and libpcap, it can passively detect online hosts or search for  them  by  sending
       arp requests.

       Furthermore,  it  can be used to inspect your network's arp traffic, or find network addresses using auto
       scan mode, which will scan for common local networks.

OPTIONS

       -i device
              The network interface to sniff and inject packets. If no interface is specified,  first  available
              will be used.

       -r range
              Scan  a  given  range  instead  of auto scan. Valid range values area for example: 192.168.0.0/24,
              192.168.0.0/16 or 192.168.0.0/8.

       -l file
              Scan ranges contained on the given file, it must contain one range per line.

       -p     Enable passive mode. In passive mode, netdiscover does not send anything, but does only sniff.

       -s time
              Sleep given time in milliseconds between each arp request injection. (default 1)

       -c count
              Number of times to send each arp request. Useful for networks with packet loss, so  it  will  scan
              given times for each host.

       -n node
              Last ip octet of the source ip used for scanning. You can change it if the default host is already
              used. (allowed range: 2 to 253, default 66)

       -S     Enable  sleep  time  suppression between each request. If set, netdiscover will sleep after having
              scanned 255 hosts instead of sleeping after each one.  This mode was used in netdiscover 0.3 beta4
              and before. Avoid this option in networks with packet loss,  or  in  wireless  networks  with  low
              signal level. (also called hardcore mode)

       -f     Enable  fast  mode  scan.  This will only scan for .1, .100 and .254 on each network. This mode is
              usefull while searching for ranges being used.  After you found such range you can make a specific
              range scan to find online boxes.

       -d     Ignore configuration files at home dir, this will use defaults ranges and  ips  for  autoscan  and
              fast mode. See below for information about configuration files.

       -P     Produces  output suitable to be redirected into a file or be parsed by another program, instead of
              using interactive mode. Enabling this option, netdiscover will stop after scanning given ranges.

       -L     When using -P, continue program execution after the active  scan  phase  to  capture  ARP  packets
              passively.

USAGE

       If  passive mode (-p), scan list (-l) or scan range (-r) options arent enabled, netdiscover will scan for
       common lan addresses.

       Screen control keys

       h      Show help screen

       j      Scroll down (or down arrow)

       k      Scroll up (or up arrow)

       a      Show arp replys list

       r      Show arp requests list

       q      Close help screen or end application

CONFIG FILES

       There are 2 configuration files that netdiscover will look for, each time it is executed, if file  doesnt
       exist  it will use default values. You can use the -d switch to disable reading and loading configuration
       files.

       ~/.netdiscover/ranges
              This file contains a list of ranges (one per line) used for auto  scan  mode  instead  of  default
              ranges. By default netdiscover will use a list of common ranges used on local networks.

              Example:
               192.168.21.0/24
               172.26.0.0/16
               10.0.0.0/8

       ~/.netdiscover/fastips
              List  contaning  the last octect of the ips to be scanned on each subnet, when using fast mode, by
              default (1,100,154).

              Example:
               1
               10
               25
               254

AUTHOR

       netdiscover was written by Jaime Penalba Estebanez.

       This manual page was originaly written by Nicolas Weyland, for the Debian project. This man page has been
       merged into netdiscover project, and modified from the original.

netdiscover                                       February 2006                                   netdiscover(8)