On Sun, 20 Mar 2005 09:58 +0000 (GMT Standard Time),
(E-Mail Removed)se (Stuart Robinson) wrote:
>Is there any simple utils that will tell you what IPs are in use on a
>wireless LAN ?
>
>You can run a capture on Etherreal and see a trace of the IPs being used,
>and Ethereal does that without the PC being set (either by DHCP or
>manually) to the correct local IP network, but is there any simpler tools
>?
>
>But anything simpler out there that giver a real time indication of IP
>activity ?
Running
arp -a
will give you a list of IP's that your machine has seen:
Interface: 192.168.1.10 on Interface 0x1000003
Internet Address Physical Address Type
192.168.1.1 00-0c-41-71-36-30 dynamic
192.168.1.50 00-80-c8-ac-c0-60 dynamic
192.168.1.101 00-0d-88-7e-7c-07 dynamic
You might also try probing the network for IP's using nMap.
http://www.insecure.org/nmap/
C:\NMap>nmap -T5 -sP 192.168.1.0/24
Starting nmap 3.55 (
http://www.insecure.org/nmap ) at 2005-03-17
12:20 Pacific Standard Time
Host 192.168.1.1 appears to be up.
Host 192.168.1.50 appears to be up.
Host MICRON (192.168.1.100) appears to be up.
Host DELLBERT (192.168.1.101) appears to be up.
Host NET44GATE (192.168.1.102) appears to be up.
Host 192.168.1.255 seems to be a subnet broadcast address (returned 1
extra pings).
Nmap run completed -- 256 IP addresses (5 hosts up) scanned in 19.719
seconds
You've already covered sniffing for IP's in use with Ethereal. This
has the advantage of not requiring an ICMP ping response to
demonstrate an address in use. Workstations with sofware firewalls
(XP SP2) that have ping response disabled, will not be found by active
probing.
--
Jeff Liebermann
(E-Mail Removed)
150 Felker St #D
http://www.LearnByDestroying.com
Santa Cruz CA 95060 AE6KS 831-336-2558