A replacement for Autoscan Network?

Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

I think in terms of three-letter-acronyms.

So with all the wacky TCP/IP names, what comes to mind ?

How about ARP - address resolution protocol ?

Using ARP as a search term, I could find this.
But I have no idea if this is the right tool
for the job or not.

https://linux.die.net/man/1/arp-scan

"ARP is only used by IPv4 hosts.

IPv6 uses NDP (neighbour discovery protocol) instead,
which is a different protocol and is not supported by arp-scan.
"
Now I have another TLA to add to my collection ("NDP").

Paul

In message , T writes:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.
[]
Not that I have virtually any knowledge of the subject you're asking
about (though I think I can understand what you want to _do_), but
perhaps you could explain a bit more why Autoscan "no longer works": it
did and now doesn't - after you did what? Added some new hardware to
your network? Allowed some automatic upgrade on the machine you're
running Autoscan on?
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

At the end of the day, I wasn't asking to kill the pandas, I was simply asking
for an audit in terms of conservation resources, and I stand by every word.
-Chris Packham, quoted in Radio Times, 29 May - 4 June 2010

On 12/22/2016 01:00 AM, J. P. Gilliver (John) wrote:
In message , T writes:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.
[]
Not that I have virtually any knowledge of the subject you're asking
about (though I think I can understand what you want to _do_), but
perhaps you could explain a bit more why Autoscan "no longer works": it
did and now doesn't - after you did what? Added some new hardware to
your network? Allowed some automatic upgrade on the machine you're
running Autoscan on?

It hasn't been maintained for a lot of years. It stopped working
on both Linux and Windows 7 at about the same time. And I have never
figured out why.

It still works on Fedora Code 23 (which is end of life). I will
create a virtual machine of fc23 just for Autoscan. I already have
a boot usb for such

T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

Seconding Paul Nospam:
I often use arp -a to search for macs and tcp/ip addresses.
I also use arp -s every now and then.

On 12/22/2016 12:23 PM, Paul in Houston TX wrote:
T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

Seconding Paul Nospam:
I often use arp -a to search for macs and tcp/ip addresses.
I also use arp -s every now and then.


Hi Paul,

NMAP will do an ARP scan, but you have to tell it
an IP range. Bummer.

"arp -a" read "the arp table". What does this mean?
Just arp data that has been previous received and cached?

-T

T wrote:
On 12/22/2016 12:23 PM, Paul in Houston TX wrote:
T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

Seconding Paul Nospam:
I often use arp -a to search for macs and tcp/ip addresses.
I also use arp -s every now and then.


Hi Paul,

NMAP will do an ARP scan, but you have to tell it
an IP range. Bummer.

"arp -a" read "the arp table". What does this mean?
Just arp data that has been previous received and cached?

-T

Don't know if this answers your questions or not...
Arp is broadcast unless you tell it to be specific.
When you turn on network devices they will send an arp broadcast to establish
ip addresses (arp table) for the physical mac addresses on the network.
If you send a packet to an network address that is not in the arp table,
then a new arp request will be sent and it will be added to the table.
So it is cached data unless something changes.
A problem with using arp is that it won't detect multiple pieces of
equipment if they are using the same ip address.

On 12/22/2016 05:01 PM, Paul in Houston TX wrote:
T wrote:
On 12/22/2016 12:23 PM, Paul in Houston TX wrote:
T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

Seconding Paul Nospam:
I often use arp -a to search for macs and tcp/ip addresses.
I also use arp -s every now and then.


Hi Paul,

NMAP will do an ARP scan, but you have to tell it
an IP range. Bummer.

"arp -a" read "the arp table". What does this mean?
Just arp data that has been previous received and cached?

-T

Don't know if this answers your questions or not...
Arp is broadcast unless you tell it to be specific.
When you turn on network devices they will send an arp broadcast to
establish
ip addresses (arp table) for the physical mac addresses on the network.
If you send a packet to an network address that is not in the arp table,
then a new arp request will be sent and it will be added to the table.
So it is cached data unless something changes.
A problem with using arp is that it won't detect multiple pieces of
equipment if they are using the same ip address.


That is kind of what I thought. I can't seem to find a way
to get nmap to do an arp scan without giving it a range of
IP addresses

On Thu, 22 Dec 2016 18:37:48 -0800, T wrote:

On 12/22/2016 05:01 PM, Paul in Houston TX wrote:
T wrote:
On 12/22/2016 12:23 PM, Paul in Houston TX wrote:
T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

Seconding Paul Nospam:
I often use arp -a to search for macs and tcp/ip addresses.
I also use arp -s every now and then.


Hi Paul,

NMAP will do an ARP scan, but you have to tell it
an IP range. Bummer.

"arp -a" read "the arp table". What does this mean?
Just arp data that has been previous received and cached?

-T

Don't know if this answers your questions or not...
Arp is broadcast unless you tell it to be specific.
When you turn on network devices they will send an arp broadcast to
establish
ip addresses (arp table) for the physical mac addresses on the network.
If you send a packet to an network address that is not in the arp table,
then a new arp request will be sent and it will be added to the table.
So it is cached data unless something changes.
A problem with using arp is that it won't detect multiple pieces of
equipment if they are using the same ip address.


That is kind of what I thought. I can't seem to find a way
to get nmap to do an arp scan without giving it a range of
IP addresses

All these systems need a "seed" to get started.

If the machine you test from has 1 or more IP address then that and
the local ARP table give the software an understanding of which IP
addresses the local device thinks it is connected to.

Even if you havent configured an address explicitly the device may
have learned 1 via DHCP from the local network.

the bits that matter are
- the local subnet (which could be scanned since it will be a lot
smaller than the full IPv4 32 bit range)
- any routing table entries (which point to the default gateway / any
local subnets for other places to look)
- the ARP table which gives dynamic local IP to MAC address mapping
within the local subnet.

Commercial scanners tend to snoop the host machine, then use default
gateway or router "seed" addresses set up explicitly and recurse.

If the routers support SNMP then the router tables can be pulled and
those treated as the next level of seed - rinse and repeat for a multi
router network.

The search tends to stall at address translations where the
translation breaks some assumptions and at firewalls since 1 of their
functions is to prevent unauthorised scanning.

The other problem is often SNMP setup - knowing a network topology and
the key devices is often part of attacking it, so this stuff tends to
be locked down......
Stephen Hope
Replace xyz with ntl to reply

On 12/23/2016 04:31 AM, Stephen wrote:
On Thu, 22 Dec 2016 18:37:48 -0800, T wrote:

On 12/22/2016 05:01 PM, Paul in Houston TX wrote:
T wrote:
On 12/22/2016 12:23 PM, Paul in Houston TX wrote:
T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

Seconding Paul Nospam:
I often use arp -a to search for macs and tcp/ip addresses.
I also use arp -s every now and then.


Hi Paul,

NMAP will do an ARP scan, but you have to tell it
an IP range. Bummer.

"arp -a" read "the arp table". What does this mean?
Just arp data that has been previous received and cached?

-T

Don't know if this answers your questions or not...
Arp is broadcast unless you tell it to be specific.
When you turn on network devices they will send an arp broadcast to
establish
ip addresses (arp table) for the physical mac addresses on the network.
If you send a packet to an network address that is not in the arp table,
then a new arp request will be sent and it will be added to the table.
So it is cached data unless something changes.
A problem with using arp is that it won't detect multiple pieces of
equipment if they are using the same ip address.


That is kind of what I thought. I can't seem to find a way
to get nmap to do an arp scan without giving it a range of
IP addresses

All these systems need a "seed" to get started.

If the machine you test from has 1 or more IP address then that and
the local ARP table give the software an understanding of which IP
addresses the local device thinks it is connected to.

Even if you havent configured an address explicitly the device may
have learned 1 via DHCP from the local network.

the bits that matter are
- the local subnet (which could be scanned since it will be a lot
smaller than the full IPv4 32 bit range)
- any routing table entries (which point to the default gateway / any
local subnets for other places to look)
- the ARP table which gives dynamic local IP to MAC address mapping
within the local subnet.

Commercial scanners tend to snoop the host machine, then use default
gateway or router "seed" addresses set up explicitly and recurse.

If the routers support SNMP then the router tables can be pulled and
those treated as the next level of seed - rinse and repeat for a multi
router network.

The search tends to stall at address translations where the
translation breaks some assumptions and at firewalls since 1 of their
functions is to prevent unauthorised scanning.

The other problem is often SNMP setup - knowing a network topology and
the key devices is often part of attacking it, so this stuff tends to
be locked down......
Stephen Hope
Replace xyz with ntl to reply


Try as I may, I am not finding a decent subsitute for AutoScan.
I have used it to find double routers installed on network
where customers have changed ISP and never removed the old routers.
Autoscan instantly should I had devices on 192.168.254.0/24 and
192.168.1.0/24.

I had to grub around their cabling (a pile behind a desk)
to find the extra router. And the customer didn't even know what
I was talking about when I asked where their router(s) was.

T wrote:
On 12/23/2016 04:31 AM, Stephen wrote:
On Thu, 22 Dec 2016 18:37:48 -0800, T wrote:

On 12/22/2016 05:01 PM, Paul in Houston TX wrote:
T wrote:
On 12/22/2016 12:23 PM, Paul in Houston TX wrote:
T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

Seconding Paul Nospam:
I often use arp -a to search for macs and tcp/ip addresses.
I also use arp -s every now and then.


Hi Paul,

NMAP will do an ARP scan, but you have to tell it
an IP range. Bummer.

"arp -a" read "the arp table". What does this mean?
Just arp data that has been previous received and cached?

-T

Don't know if this answers your questions or not...
Arp is broadcast unless you tell it to be specific.
When you turn on network devices they will send an arp broadcast to
establish
ip addresses (arp table) for the physical mac addresses on the network.
If you send a packet to an network address that is not in the arp table,
then a new arp request will be sent and it will be added to the table.
So it is cached data unless something changes.
A problem with using arp is that it won't detect multiple pieces of
equipment if they are using the same ip address.


That is kind of what I thought. I can't seem to find a way
to get nmap to do an arp scan without giving it a range of
IP addresses

All these systems need a "seed" to get started.

If the machine you test from has 1 or more IP address then that and
the local ARP table give the software an understanding of which IP
addresses the local device thinks it is connected to.

Even if you havent configured an address explicitly the device may
have learned 1 via DHCP from the local network.

the bits that matter are
- the local subnet (which could be scanned since it will be a lot
smaller than the full IPv4 32 bit range)
- any routing table entries (which point to the default gateway / any
local subnets for other places to look)
- the ARP table which gives dynamic local IP to MAC address mapping
within the local subnet.

Commercial scanners tend to snoop the host machine, then use default
gateway or router "seed" addresses set up explicitly and recurse.

If the routers support SNMP then the router tables can be pulled and
those treated as the next level of seed - rinse and repeat for a multi
router network.

The search tends to stall at address translations where the
translation breaks some assumptions and at firewalls since 1 of their
functions is to prevent unauthorised scanning.

The other problem is often SNMP setup - knowing a network topology and
the key devices is often part of attacking it, so this stuff tends to
be locked down......
Stephen Hope
Replace xyz with ntl to reply


Try as I may, I am not finding a decent subsitute for AutoScan.
I have used it to find double routers installed on network
where customers have changed ISP and never removed the old routers.
Autoscan instantly should I had devices on 192.168.254.0/24 and
192.168.1.0/24.

I had to grub around their cabling (a pile behind a desk)
to find the extra router. And the customer didn't even know what
I was talking about when I asked where their router(s) was.

Did arp -a not work?

On 12/23/2016 03:42 PM, Paul in Houston TX wrote:
T wrote:
On 12/23/2016 04:31 AM, Stephen wrote:
On Thu, 22 Dec 2016 18:37:48 -0800, T wrote:

On 12/22/2016 05:01 PM, Paul in Houston TX wrote:
T wrote:
On 12/22/2016 12:23 PM, Paul in Houston TX wrote:
T wrote:
Hi All,

I am looking for a network discover tool to replace Autoscan
Network, which no longer works and is unmaintained.

So far everything I have found scans ranges of IP address.
To scan 0-255.0-255.0-255.0-255 would take on the order of
a years or so to complete. So they are all out.

I want to find all devices on the local Ethernet
regardless of whether their IP -- if the even have one --
resides on the same IP block as the tester.

Somehow Autoscan Network could find things without IP.
If would even find things on the local Ethernet that
had different IP network blocks and do it in a matter of minutes.

Google is failing me here. Any of you guys have a replacement
that you like?

Many thanks,
-T

Seconding Paul Nospam:
I often use arp -a to search for macs and tcp/ip addresses.
I also use arp -s every now and then.


Hi Paul,

NMAP will do an ARP scan, but you have to tell it
an IP range. Bummer.

"arp -a" read "the arp table". What does this mean?
Just arp data that has been previous received and cached?

-T

Don't know if this answers your questions or not...
Arp is broadcast unless you tell it to be specific.
When you turn on network devices they will send an arp broadcast to
establish
ip addresses (arp table) for the physical mac addresses on the
network.
If you send a packet to an network address that is not in the arp
table,
then a new arp request will be sent and it will be added to the table.
So it is cached data unless something changes.
A problem with using arp is that it won't detect multiple pieces of
equipment if they are using the same ip address.


That is kind of what I thought. I can't seem to find a way
to get nmap to do an arp scan without giving it a range of
IP addresses

All these systems need a "seed" to get started.

If the machine you test from has 1 or more IP address then that and
the local ARP table give the software an understanding of which IP
addresses the local device thinks it is connected to.

Even if you havent configured an address explicitly the device may
have learned 1 via DHCP from the local network.

the bits that matter are
- the local subnet (which could be scanned since it will be a lot
smaller than the full IPv4 32 bit range)
- any routing table entries (which point to the default gateway / any
local subnets for other places to look)
- the ARP table which gives dynamic local IP to MAC address mapping
within the local subnet.

Commercial scanners tend to snoop the host machine, then use default
gateway or router "seed" addresses set up explicitly and recurse.

If the routers support SNMP then the router tables can be pulled and
those treated as the next level of seed - rinse and repeat for a multi
router network.

The search tends to stall at address translations where the
translation breaks some assumptions and at firewalls since 1 of their
functions is to prevent unauthorised scanning.

The other problem is often SNMP setup - knowing a network topology and
the key devices is often part of attacking it, so this stuff tends to
be locked down......
Stephen Hope
Replace xyz with ntl to reply


Try as I may, I am not finding a decent subsitute for AutoScan.
I have used it to find double routers installed on network
where customers have changed ISP and never removed the old routers.
Autoscan instantly should I had devices on 192.168.254.0/24 and
192.168.1.0/24.

I had to grub around their cabling (a pile behind a desk)
to find the extra router. And the customer didn't even know what
I was talking about when I asked where their router(s) was.

Did arp -a not work?


I did not use it. "arp -a" only shows what is cached.
And, the customer's machine was an Apple (graphic artists
love the things -- no comment). I booted off a Fedora
Core 23 USB Flash drive and ran Auto Scan.

Oh and if anyone it going to try this with an apple, install a
virtual keyboard. Apple's typically use idiot blue tooth keyboards

Fedora Core + Inkscape = graphic artist heaven

In message , T writes:
[]
I had to grub around their cabling (a pile behind a desk)
to find the extra router. And the customer didn't even know what
I was talking about when I asked where their router(s) was.

On getting a similarly blank look, I paraphrased it as "thing that is
connected to a 'phone socket with flashing lights on it". Immediate
recognition! (I may have added "small" before thing.)

--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Find out what works. Then do it. That's my system. I'm always surprised it
isn't more popular. - Scott Adams, 2015

On 12/25/2016 02:26 AM, J. P. Gilliver (John) wrote:
In message , T writes:
[]
I had to grub around their cabling (a pile behind a desk)
to find the extra router. And the customer didn't even know what
I was talking about when I asked where their router(s) was.

On getting a similarly blank look, I paraphrased it as "thing that is
connected to a 'phone socket with flashing lights on it". Immediate
recognition! (I may have added "small" before thing.)


:-)

I love Auto Scan Network for when they daisy chair routers