ARP commands

ARP commands

sudo arp-scan -l --interface=wlan0

arp-scan sends ARP packets to hosts on the local network and displays any responses that are received. The network interface to use can be specified with the --interface option. If this option is not present, arp-scan will search the system interface list for the lowest numbered, configured up interface (excluding loopback). By default, the ARP packets are sent to the Ethernet broadcast address, ff:ff:ff:ff:ff:ff, but that can be changed with the --destaddr option.

it is used to find out what all are the hosts that is connected to the local network.Another way of finding out the same with “Ping” with nmap[ nmap -sP 192.168.0.1/24 ]

You can find details about the arp-scan from http://linux.die.net/man/1/arp-scan.

In the above command “ -l ” tells you to scan all local network and --interface tells to use which interface to use.

Quickly if you want to know about the other hosts,Use arp-cache by:

But my ARP-SCAN was not pulling out all the network hosts that are connected !!! Dont know know why ?? NEED MORE RESEARCH !!!

3 ways to find out all the hosts in the LAN :

• nmap -sP 192.168.0.1/24 [ Works !! need to test against firewall ]
• sudo arp-scan --interface=eth0 192.168.0.0/24 [ Errors !! not complete list]
• arp -n [ Accessing already saved arp-cache !! may not be reliable]

Links::

Crack wifi password with aicrack :

http://null-byte.wonderhowto.com/how-to/hack-wi-fi-cracking-wpa2-psk-passwords-using-aircrack-ng-0148366/