如何使用 "arp-scan "命令发现局域网中的设备?
arp-scan
is a command-line tool used for network discovery. It sends ARP requests to identify devices on a local area network (LAN). Here's a step-by-step guide on how to use arp-scan
to discover devices on your LAN:
arp-scan
是一个用于网络发现的命令行工具。它通过发送 ARP 请求来识别局域网 (LAN) 上的设备。以下是如何使用 arp-scan
发现局域网内设备的分步指南:
Install
arp-scan
: First, you need to installarp-scan
. On a Debian-based system (like Ubuntu), you can install it usingapt
.
安装arp-scan
:首先,你需要安装arp-scan
。在基于 Debian 的系统(如 Ubuntu)上,可以使用apt
.bashsudo apt-get update sudo apt-get install arp-scan
Run
arp-scan
: After installation, you can usearp-scan
to scan your network. The basic syntax is:
运行arp-scan
:安装后,可以使用arp-scan
扫描网络。基本语法是bashsudo arp-scan --interface=INTERFACE NETWORK
INTERFACE
: Your network interface (e.g.,eth0
,wlan0
). You can find your network interfaces using theifconfig
orip addr
command.
INTERFACE
:您的网络接口(例如,eth0
,wlan0
)。您可以使用ifconfig
或ip addr
命令查找网络接口。NETWORK
: The network address and netmask (e.g.,192.168.1.0/24
).
NETWORK
:网络地址和掩码(例如,192.168.1.0/24
)。
Example: 例如
bashsudo arp-scan --interface=eth0 192.168.1.0/24
Understanding the Output: The output of
arp-scan
will list the IP address, MAC address, and vendor information of each device it discovers on the network.
了解输出:arp-scan
的输出将列出它在网络上发现的每个设备的 IP 地址、MAC 地址和供应商信息。Example output: 输出示例
csharpInterface: eth0, datalink type: EN10MB (Ethernet) Starting arp-scan 1.9.6 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/) 192.168.1.1 00:1a:2b:3c:4d:5e Cisco Systems, Inc 192.168.1.10 00:1a:2b:3c:4d:5f Apple, Inc 192.168.1.20 00:1a:2b:3c:4d:60 Samsung Electronics Co.,Ltd 3 packets received by filter, 0 packets dropped by kernel Ending arp-scan 1.9.6: 256 hosts scanned in 2.002 seconds (127.93 hosts/sec). 3 responded
Additional Options:
arp-scan
has several options to customize its behavior. Some useful options include:
其他选项:arp-scan
有几个选项可以自定义其行为。一些有用的选项包括-l
: Use the local network interface's IP address range.
-l
:使用本地网络接口的 IP 地址范围。-g
: Generate a random MAC address for the sender.
-g
:为发件人生成一个随机 MAC 地址。-N
: Do not resolve hostnames.
-N
:不解析主机名。-q
: Suppress non-essential output.
-q
: 禁止非必要输出。
Example with additional options:
带有附加选项的示例:bashsudo arp-scan --interface=eth0 -l -N -q
Example Script 脚本示例
Here’s an example script that uses arp-scan
to scan the local network and output the results:
下面是一个使用 arp-scan
扫描本地网络并输出结果的脚本示例:
bash#!/bin/bash
# Determine the network interface (e.g., eth0, wlan0)
INTERFACE="eth0"
# Get the network address range using ip command
NETWORK=$(ip -o -f inet addr show $INTERFACE | awk '/scope global/ {print $4}')
# Run arp-scan to discover devices in the network
sudo arp-scan --interface=$INTERFACE $NETWORK
Save this script to a file, for example scan_network.sh
, make it executable, and run it:
将此脚本保存到一个文件中,例如 scan_network.sh
,使其可执行,然后运行它:
bashchmod +x scan_network.sh
./scan_network.sh
This script will automatically detect the network address range and use arp-scan
to discover devices on the network.
该脚本将自动检测网络地址范围,并使用 arp-scan
发现网络上的设备。
ChatGPT 可能会出错。检查重要信息。