If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Rate Thread | Display Modes |
#1
|
|||
|
|||
A replacement for Autoscan Network?
Hi All,
I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T |
Ads |
#2
|
|||
|
|||
A replacement for Autoscan Network?
T wrote:
Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T I think in terms of three-letter-acronyms. So with all the wacky TCP/IP names, what comes to mind ? How about ARP - address resolution protocol ? Using ARP as a search term, I could find this. But I have no idea if this is the right tool for the job or not. https://linux.die.net/man/1/arp-scan "ARP is only used by IPv4 hosts. IPv6 uses NDP (neighbour discovery protocol) instead, which is a different protocol and is not supported by arp-scan. " Now I have another TLA to add to my collection ("NDP"). Paul |
#3
|
|||
|
|||
A replacement for Autoscan Network?
In message , T writes:
Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. [] Not that I have virtually any knowledge of the subject you're asking about (though I think I can understand what you want to _do_), but perhaps you could explain a bit more why Autoscan "no longer works": it did and now doesn't - after you did what? Added some new hardware to your network? Allowed some automatic upgrade on the machine you're running Autoscan on? -- J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf At the end of the day, I wasn't asking to kill the pandas, I was simply asking for an audit in terms of conservation resources, and I stand by every word. -Chris Packham, quoted in Radio Times, 29 May - 4 June 2010 |
#4
|
|||
|
|||
A replacement for Autoscan Network?
On 12/22/2016 01:00 AM, J. P. Gilliver (John) wrote:
In message , T writes: Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. [] Not that I have virtually any knowledge of the subject you're asking about (though I think I can understand what you want to _do_), but perhaps you could explain a bit more why Autoscan "no longer works": it did and now doesn't - after you did what? Added some new hardware to your network? Allowed some automatic upgrade on the machine you're running Autoscan on? It hasn't been maintained for a lot of years. It stopped working on both Linux and Windows 7 at about the same time. And I have never figured out why. It still works on Fedora Code 23 (which is end of life). I will create a virtual machine of fc23 just for Autoscan. I already have a boot usb for such |
#5
|
|||
|
|||
A replacement for Autoscan Network?
T wrote:
Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T Seconding Paul Nospam: I often use arp -a to search for macs and tcp/ip addresses. I also use arp -s every now and then. |
#6
|
|||
|
|||
A replacement for Autoscan Network?
On 12/22/2016 12:23 PM, Paul in Houston TX wrote:
T wrote: Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T Seconding Paul Nospam: I often use arp -a to search for macs and tcp/ip addresses. I also use arp -s every now and then. Hi Paul, NMAP will do an ARP scan, but you have to tell it an IP range. Bummer. "arp -a" read "the arp table". What does this mean? Just arp data that has been previous received and cached? -T |
#7
|
|||
|
|||
A replacement for Autoscan Network?
T wrote:
On 12/22/2016 12:23 PM, Paul in Houston TX wrote: T wrote: Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T Seconding Paul Nospam: I often use arp -a to search for macs and tcp/ip addresses. I also use arp -s every now and then. Hi Paul, NMAP will do an ARP scan, but you have to tell it an IP range. Bummer. "arp -a" read "the arp table". What does this mean? Just arp data that has been previous received and cached? -T Don't know if this answers your questions or not... Arp is broadcast unless you tell it to be specific. When you turn on network devices they will send an arp broadcast to establish ip addresses (arp table) for the physical mac addresses on the network. If you send a packet to an network address that is not in the arp table, then a new arp request will be sent and it will be added to the table. So it is cached data unless something changes. A problem with using arp is that it won't detect multiple pieces of equipment if they are using the same ip address. |
#8
|
|||
|
|||
A replacement for Autoscan Network?
On 12/22/2016 05:01 PM, Paul in Houston TX wrote:
T wrote: On 12/22/2016 12:23 PM, Paul in Houston TX wrote: T wrote: Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T Seconding Paul Nospam: I often use arp -a to search for macs and tcp/ip addresses. I also use arp -s every now and then. Hi Paul, NMAP will do an ARP scan, but you have to tell it an IP range. Bummer. "arp -a" read "the arp table". What does this mean? Just arp data that has been previous received and cached? -T Don't know if this answers your questions or not... Arp is broadcast unless you tell it to be specific. When you turn on network devices they will send an arp broadcast to establish ip addresses (arp table) for the physical mac addresses on the network. If you send a packet to an network address that is not in the arp table, then a new arp request will be sent and it will be added to the table. So it is cached data unless something changes. A problem with using arp is that it won't detect multiple pieces of equipment if they are using the same ip address. That is kind of what I thought. I can't seem to find a way to get nmap to do an arp scan without giving it a range of IP addresses |
#9
|
|||
|
|||
A replacement for Autoscan Network?
On Thu, 22 Dec 2016 18:37:48 -0800, T wrote:
On 12/22/2016 05:01 PM, Paul in Houston TX wrote: T wrote: On 12/22/2016 12:23 PM, Paul in Houston TX wrote: T wrote: Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T Seconding Paul Nospam: I often use arp -a to search for macs and tcp/ip addresses. I also use arp -s every now and then. Hi Paul, NMAP will do an ARP scan, but you have to tell it an IP range. Bummer. "arp -a" read "the arp table". What does this mean? Just arp data that has been previous received and cached? -T Don't know if this answers your questions or not... Arp is broadcast unless you tell it to be specific. When you turn on network devices they will send an arp broadcast to establish ip addresses (arp table) for the physical mac addresses on the network. If you send a packet to an network address that is not in the arp table, then a new arp request will be sent and it will be added to the table. So it is cached data unless something changes. A problem with using arp is that it won't detect multiple pieces of equipment if they are using the same ip address. That is kind of what I thought. I can't seem to find a way to get nmap to do an arp scan without giving it a range of IP addresses All these systems need a "seed" to get started. If the machine you test from has 1 or more IP address then that and the local ARP table give the software an understanding of which IP addresses the local device thinks it is connected to. Even if you havent configured an address explicitly the device may have learned 1 via DHCP from the local network. the bits that matter are - the local subnet (which could be scanned since it will be a lot smaller than the full IPv4 32 bit range) - any routing table entries (which point to the default gateway / any local subnets for other places to look) - the ARP table which gives dynamic local IP to MAC address mapping within the local subnet. Commercial scanners tend to snoop the host machine, then use default gateway or router "seed" addresses set up explicitly and recurse. If the routers support SNMP then the router tables can be pulled and those treated as the next level of seed - rinse and repeat for a multi router network. The search tends to stall at address translations where the translation breaks some assumptions and at firewalls since 1 of their functions is to prevent unauthorised scanning. The other problem is often SNMP setup - knowing a network topology and the key devices is often part of attacking it, so this stuff tends to be locked down...... Stephen Hope Replace xyz with ntl to reply |
#10
|
|||
|
|||
A replacement for Autoscan Network?
On 12/23/2016 04:31 AM, Stephen wrote:
On Thu, 22 Dec 2016 18:37:48 -0800, T wrote: On 12/22/2016 05:01 PM, Paul in Houston TX wrote: T wrote: On 12/22/2016 12:23 PM, Paul in Houston TX wrote: T wrote: Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T Seconding Paul Nospam: I often use arp -a to search for macs and tcp/ip addresses. I also use arp -s every now and then. Hi Paul, NMAP will do an ARP scan, but you have to tell it an IP range. Bummer. "arp -a" read "the arp table". What does this mean? Just arp data that has been previous received and cached? -T Don't know if this answers your questions or not... Arp is broadcast unless you tell it to be specific. When you turn on network devices they will send an arp broadcast to establish ip addresses (arp table) for the physical mac addresses on the network. If you send a packet to an network address that is not in the arp table, then a new arp request will be sent and it will be added to the table. So it is cached data unless something changes. A problem with using arp is that it won't detect multiple pieces of equipment if they are using the same ip address. That is kind of what I thought. I can't seem to find a way to get nmap to do an arp scan without giving it a range of IP addresses All these systems need a "seed" to get started. If the machine you test from has 1 or more IP address then that and the local ARP table give the software an understanding of which IP addresses the local device thinks it is connected to. Even if you havent configured an address explicitly the device may have learned 1 via DHCP from the local network. the bits that matter are - the local subnet (which could be scanned since it will be a lot smaller than the full IPv4 32 bit range) - any routing table entries (which point to the default gateway / any local subnets for other places to look) - the ARP table which gives dynamic local IP to MAC address mapping within the local subnet. Commercial scanners tend to snoop the host machine, then use default gateway or router "seed" addresses set up explicitly and recurse. If the routers support SNMP then the router tables can be pulled and those treated as the next level of seed - rinse and repeat for a multi router network. The search tends to stall at address translations where the translation breaks some assumptions and at firewalls since 1 of their functions is to prevent unauthorised scanning. The other problem is often SNMP setup - knowing a network topology and the key devices is often part of attacking it, so this stuff tends to be locked down...... Stephen Hope Replace xyz with ntl to reply Try as I may, I am not finding a decent subsitute for AutoScan. I have used it to find double routers installed on network where customers have changed ISP and never removed the old routers. Autoscan instantly should I had devices on 192.168.254.0/24 and 192.168.1.0/24. I had to grub around their cabling (a pile behind a desk) to find the extra router. And the customer didn't even know what I was talking about when I asked where their router(s) was. |
#11
|
|||
|
|||
A replacement for Autoscan Network?
T wrote:
On 12/23/2016 04:31 AM, Stephen wrote: On Thu, 22 Dec 2016 18:37:48 -0800, T wrote: On 12/22/2016 05:01 PM, Paul in Houston TX wrote: T wrote: On 12/22/2016 12:23 PM, Paul in Houston TX wrote: T wrote: Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T Seconding Paul Nospam: I often use arp -a to search for macs and tcp/ip addresses. I also use arp -s every now and then. Hi Paul, NMAP will do an ARP scan, but you have to tell it an IP range. Bummer. "arp -a" read "the arp table". What does this mean? Just arp data that has been previous received and cached? -T Don't know if this answers your questions or not... Arp is broadcast unless you tell it to be specific. When you turn on network devices they will send an arp broadcast to establish ip addresses (arp table) for the physical mac addresses on the network. If you send a packet to an network address that is not in the arp table, then a new arp request will be sent and it will be added to the table. So it is cached data unless something changes. A problem with using arp is that it won't detect multiple pieces of equipment if they are using the same ip address. That is kind of what I thought. I can't seem to find a way to get nmap to do an arp scan without giving it a range of IP addresses All these systems need a "seed" to get started. If the machine you test from has 1 or more IP address then that and the local ARP table give the software an understanding of which IP addresses the local device thinks it is connected to. Even if you havent configured an address explicitly the device may have learned 1 via DHCP from the local network. the bits that matter are - the local subnet (which could be scanned since it will be a lot smaller than the full IPv4 32 bit range) - any routing table entries (which point to the default gateway / any local subnets for other places to look) - the ARP table which gives dynamic local IP to MAC address mapping within the local subnet. Commercial scanners tend to snoop the host machine, then use default gateway or router "seed" addresses set up explicitly and recurse. If the routers support SNMP then the router tables can be pulled and those treated as the next level of seed - rinse and repeat for a multi router network. The search tends to stall at address translations where the translation breaks some assumptions and at firewalls since 1 of their functions is to prevent unauthorised scanning. The other problem is often SNMP setup - knowing a network topology and the key devices is often part of attacking it, so this stuff tends to be locked down...... Stephen Hope Replace xyz with ntl to reply Try as I may, I am not finding a decent subsitute for AutoScan. I have used it to find double routers installed on network where customers have changed ISP and never removed the old routers. Autoscan instantly should I had devices on 192.168.254.0/24 and 192.168.1.0/24. I had to grub around their cabling (a pile behind a desk) to find the extra router. And the customer didn't even know what I was talking about when I asked where their router(s) was. Did arp -a not work? |
#12
|
|||
|
|||
A replacement for Autoscan Network?
On 12/23/2016 03:42 PM, Paul in Houston TX wrote:
T wrote: On 12/23/2016 04:31 AM, Stephen wrote: On Thu, 22 Dec 2016 18:37:48 -0800, T wrote: On 12/22/2016 05:01 PM, Paul in Houston TX wrote: T wrote: On 12/22/2016 12:23 PM, Paul in Houston TX wrote: T wrote: Hi All, I am looking for a network discover tool to replace Autoscan Network, which no longer works and is unmaintained. So far everything I have found scans ranges of IP address. To scan 0-255.0-255.0-255.0-255 would take on the order of a years or so to complete. So they are all out. I want to find all devices on the local Ethernet regardless of whether their IP -- if the even have one -- resides on the same IP block as the tester. Somehow Autoscan Network could find things without IP. If would even find things on the local Ethernet that had different IP network blocks and do it in a matter of minutes. Google is failing me here. Any of you guys have a replacement that you like? Many thanks, -T Seconding Paul Nospam: I often use arp -a to search for macs and tcp/ip addresses. I also use arp -s every now and then. Hi Paul, NMAP will do an ARP scan, but you have to tell it an IP range. Bummer. "arp -a" read "the arp table". What does this mean? Just arp data that has been previous received and cached? -T Don't know if this answers your questions or not... Arp is broadcast unless you tell it to be specific. When you turn on network devices they will send an arp broadcast to establish ip addresses (arp table) for the physical mac addresses on the network. If you send a packet to an network address that is not in the arp table, then a new arp request will be sent and it will be added to the table. So it is cached data unless something changes. A problem with using arp is that it won't detect multiple pieces of equipment if they are using the same ip address. That is kind of what I thought. I can't seem to find a way to get nmap to do an arp scan without giving it a range of IP addresses All these systems need a "seed" to get started. If the machine you test from has 1 or more IP address then that and the local ARP table give the software an understanding of which IP addresses the local device thinks it is connected to. Even if you havent configured an address explicitly the device may have learned 1 via DHCP from the local network. the bits that matter are - the local subnet (which could be scanned since it will be a lot smaller than the full IPv4 32 bit range) - any routing table entries (which point to the default gateway / any local subnets for other places to look) - the ARP table which gives dynamic local IP to MAC address mapping within the local subnet. Commercial scanners tend to snoop the host machine, then use default gateway or router "seed" addresses set up explicitly and recurse. If the routers support SNMP then the router tables can be pulled and those treated as the next level of seed - rinse and repeat for a multi router network. The search tends to stall at address translations where the translation breaks some assumptions and at firewalls since 1 of their functions is to prevent unauthorised scanning. The other problem is often SNMP setup - knowing a network topology and the key devices is often part of attacking it, so this stuff tends to be locked down...... Stephen Hope Replace xyz with ntl to reply Try as I may, I am not finding a decent subsitute for AutoScan. I have used it to find double routers installed on network where customers have changed ISP and never removed the old routers. Autoscan instantly should I had devices on 192.168.254.0/24 and 192.168.1.0/24. I had to grub around their cabling (a pile behind a desk) to find the extra router. And the customer didn't even know what I was talking about when I asked where their router(s) was. Did arp -a not work? I did not use it. "arp -a" only shows what is cached. And, the customer's machine was an Apple (graphic artists love the things -- no comment). I booted off a Fedora Core 23 USB Flash drive and ran Auto Scan. Oh and if anyone it going to try this with an apple, install a virtual keyboard. Apple's typically use idiot blue tooth keyboards Fedora Core + Inkscape = graphic artist heaven |
#13
|
|||
|
|||
A replacement for Autoscan Network?
In message , T writes:
[] I had to grub around their cabling (a pile behind a desk) to find the extra router. And the customer didn't even know what I was talking about when I asked where their router(s) was. On getting a similarly blank look, I paraphrased it as "thing that is connected to a 'phone socket with flashing lights on it". Immediate recognition! (I may have added "small" before thing.) -- J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf Find out what works. Then do it. That's my system. I'm always surprised it isn't more popular. - Scott Adams, 2015 |
#14
|
|||
|
|||
A replacement for Autoscan Network?
On 12/25/2016 02:26 AM, J. P. Gilliver (John) wrote:
In message , T writes: [] I had to grub around their cabling (a pile behind a desk) to find the extra router. And the customer didn't even know what I was talking about when I asked where their router(s) was. On getting a similarly blank look, I paraphrased it as "thing that is connected to a 'phone socket with flashing lights on it". Immediate recognition! (I may have added "small" before thing.) :-) I love Auto Scan Network for when they daisy chair routers |
Thread Tools | |
Display Modes | Rate This Thread |
|
|