Penetration Testing mailing list archives

Re: Using ARP to map a network


From: "planz" <planz235 () hotmail com>
Date: Wed, 5 Feb 2003 09:22:59 +0800

I am also searching for a similar tool or perl script, which can do a RARP to find IP addresses.  Currently I am doing 
this on WLAN.  I am able to sniff MAC addresses of different WLAN clients and Access Points.  All I have is a list of 
MAC addrresses. From here, I want to map the network. I am tired of googled it. Some one please help...!


----- Original Message ----- 
From: "Jason Lewis" <jlewis () packetnexus com>
To: <pen-test () securityfocus com>
Sent: Wednesday, February 05, 2003 7:36 AM
Subject: Using ARP to map a network


I have searched and can't seem to find any tools to help map a network
based on ARP tables.

It seems to me, I could take ARP tables from several machines and build a
network map.  If machines were behind a router the ARP tables would show
multiple IP's with the same MAC.  With enough ARP tables, wouldn't I be
able to build a map?

Is my theory flawed?

My goal is to do passive network mapping based on any local information I
can obtain from computers or network devices.  Anyone have any ideas?

jas



----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: