network scanning

[zimu]

just wondering, there's a local network here with the 192.168.x.x prefix. wanted to know if there was any way to basically run a scan that would start at 192.168.0.1 and end at 192.168.255.254 and return all the machines that have the ip address as well as the hostnames?

Thanks 🙂

 

[JackMDS]

http://www.softperfect.com/download/netscan.exe

:sun:

 

[Atheus]

Originally posted by: zimu
wanted to know if there was any way to basically run a scan...

Is there ever. Nmap is everyone's favourite 'port scanner', it's full of features and I think it's available for windows these days, if not scanline is a nice simple cli scanner for 2000/xp.

 

[loup garou]

Originally posted by: JackMDS
http://www.softperfect.com/download/netscan.exe

:sun:

Excellent utility, I use it daily!

 

[Nothinman]

It's not like it would be difficult to write a single for loop in any shell that would run host (or nslookup if your system is crippled) on each address.

 

[kt]

Originally posted by: Nothinman
It's not like it would be difficult to write a single for loop in any shell that would run host (or nslookup if your system is crippled) on each address.

but why re-invent the wheel?

 

[Nothinman]

Because the linked executable is a Windows app and nmap isn't exactly non-invasive. I guess you could tell nmap to just do a ping scan, but that would still take longer than just doing the DNS queries.

That and it took me like 10 seconds to write :

for i in `seq -s ' ' 1 255`; do for j in `seq -s ' ' 0 255`; do host 192.168.$j.$i; done; done

 

[nweaver]

I think they all assumed "Windows" and windows has horrible shell for scripting. My first thought is "Perl" and then "angryIP if they run windows and don't have perl"

 

[Nothinman]

It's possible to do the for loop in the CMD as well, although there's no host command so you'd have to use nslookup or ping, but I don't know the syntax off the top of my head.

 

[nweaver]

Originally posted by: Nothinman
It's possible to do the for loop in the CMD as well, although there's no host command so you'd have to use nslookup or ping, but I don't know the syntax off the top of my head.

point being that the windows shell is not nearly as scriptable or easy (imho) as bash on a linux machine for many common tasks.

 

[Kelemvor]

We use this one at work sometimes:
http://www.angryziber.com/ipscan/

And for a TON of information (but one IP/name at a time) I use this as well:
LanSpy 2.0 : http://www.lantricks.com/